{
  "extends": ["config:best-practices"],
  "packageRules": [
    {
      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
      "automerge": false
    },
    {
      "matchPackagePatterns": ["^actions/checkout"],
      "ignoreVersions": ["v4"]
    },
    {
      "matchPackagePatterns": ["^https://github.com/oxsecurity/megalinter"],
      "ignoreVersions": [">=8.7.0"]
    },
    {
      "matchPackagePatterns": ["^https://github.com/wackbyte/rust-toolchain"],
      "ignoreVersions": ["trunk"]
    }
  ],
  "osvVulnerabilityAlerts": true
}