{ "extends": [ "config:best-practices" ], "packageRules": [ { "matchUpdateTypes": [ "minor", "patch", "pin", "digest" ], "automerge": false }, { "matchPackagePatterns": ["^actions/checkout"], "ignoreVersions": ["v4"] }, { "matchPackagePatterns": ["^https://github.com/oxsecurity/megalinter"], "ignoreVersions": [">=8.7.0"] }, { "matchPackagePatterns": ["^https://github.com/wackbyte/rust-toolchain"], "ignoreVersions": ["trunk"] } ], "osvVulnerabilityAlerts": true }