From 6888d317f0e34b487a7998b2488392ff11750d99 Mon Sep 17 00:00:00 2001
From: Max <max@catcatgo.de>
Date: Fri, 21 Aug 2026 13:53:47 +0200
Subject: [PATCH 1/2] auto update patch versions

---
 renovate.json | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/renovate.json b/renovate.json
index 8139008f..94317fc3 100644
--- a/renovate.json
+++ b/renovate.json
@@ -29,13 +29,17 @@
     // https://docs.renovatebot.com/presets-default/#automergestablenonmajor
     {
       "groupName": "all stable non-major dependencies",
-      "groupSlug": "all-stable-minor-patch",
+      "groupSlug": "all-stable-minor",
       "matchCurrentVersion": "!/^0/",
       "matchUpdateTypes": [
-        "minor",
-        "patch"
+        "minor"
       ]
     },
+    {
+      "matchUpdateTypes": ["patch"],
+      "matchCurrentVersion": "!/^0/",
+      "automerge": true
+    },
     {
       "matchDatasources": ["docker"],
       "matchPackageNames": ["docker.io/pretix/standalone"],
-- 
2.54.0


From 821814a95cd345df259c1a898eb470c60593876a Mon Sep 17 00:00:00 2001
From: Max <max@catcatgo.de>
Date: Fri, 21 Aug 2026 13:54:19 +0200
Subject: [PATCH 2/2] except keycloak from grouped update PRs

keycloak is a critical service
separating keycloak updates makes it easier to respond quickly to
critical updates or delay them when there are breaking changes
---
 renovate.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/renovate.json b/renovate.json
index 94317fc3..d36e7fef 100644
--- a/renovate.json
+++ b/renovate.json
@@ -33,6 +33,9 @@
       "matchCurrentVersion": "!/^0/",
       "matchUpdateTypes": [
         "minor"
+      ],
+      "excludePackageNames": [
+        "git.hamburg.ccc.de/ccchh/oci-images/keycloak"
       ]
     },
     {
-- 
2.54.0