only allow sops encryption of *.sops.* files

renovate.json

@@ -30,19 +30,19 @@
       "matchUpdateTypes": [
         "minor",
         "patch"
-      ]
+      ],
+      "matchJsonata": ["isBreaking != true"]
     },
     {
       "matchDatasources": ["docker"],
       "matchPackageNames": ["docker.io/pretix/standalone"],
-      "matchUpdateTypes": ["minor"],
-      "groupName": null
+      "versioning": "regex:^(?<major>\\d+\\.\\d+)(?:\\.(?<minor>\\d+))$"
     },
     {
       "matchDatasources": ["docker"],
       "matchPackageNames": ["docker.io/pretalx/standalone"],
       "matchUpdateTypes": ["minor"],
-      "groupName": null
+      "isBreaking": true
     }
   ],
   "customManagers": [