renovate.json

{
    "enabledManagers": [
        "gomod"
    ],
    "semanticCommitType": "dep",
    "semanticCommitScope": "",
    "vulnerabilityAlerts": {
        "labels": [
            "security"
        ]
    },
    "stabilityDays": 3,
    "packageRules": [
        {
            "updateTypes": [
                "minor",
                "patch",
                "digest"
            ],
            "automerge": true,
            "automergeType": "branch",
            "schedule": [
                "before 3am on the first day of the month"
            ]
        },
        {
            "updateTypes": [
                "major"
            ],
            "schedule": [
                "before 4am on the first day of the month"
            ]
        }
    ],
    "prConcurrentLimit": 5,
    "prHourlyLimit": 3,
    "postUpdateOptions": [
        "gomodUpdateImportPaths",
        "gomodTidy"
    ],
    "gomod": {
        "enabled": true
    }
}