[renovate configuration json] How to configure json for renovate automerge with GitHub for pull request workflow #devops

azure-pipelines.renovate.yml

---
name: renovate-$(Build.Reason)-$(SourceBranchName)-$(Date:yyyyMMdd)-$(Rev:.r)
pool:
  name: Azure Pipelines
  vmImage: ubuntu-latest

trigger: none
schedules:
  - cron: 0 07 * * Mon,Wed,Fri # Build every Monday, Wednesday, and Friday at 7am
    displayName: MonWedFri7am # friendly name given to a specific schedule
    branches:
      include: [main] # [ string ] # which branches the schedule applies to
      # exclude: [ string ] # which branches to exclude from the schedule
    always: true # whether to always run the pipeline or only if there have been source code changes since the last successful scheduled run. The default is false.

variables:
  - name: LOG_LEVEL
    value: debug
  - name: System.Debug
    value: true
  - group: renovate # configure a library group and include `GITHUB_COM_TOKEN` in it. This needs _NO_ permissions as it's just using the public api for queries and auth avoids api token issues

steps:
  - task: geeklearningio.gl-vsts-tasks-yarn.yarn-installer-task.YarnInstaller@3
    displayName: Use Yarn 1.x

  - task: NodeTool@0
    displayName: Use Node 14.15.4
    inputs:
      versionSpec: 14.15.4
    # install this task from: https://marketplace.visualstudio.com/items?itemName=jyc.vsts-extensions-renovate-me
  - task: RenovateMe@0
    displayName: Renovate
    inputs:
      renovateOptionsVersion: latest
      renovateOptionsArgs: --host-rules="[{\"domainName\":\"github.com\",\"token\":\"$(GITHUB_COM_TOKEN)\"}]"
    env:
      GITHUB_COM_TOKEN: $(GITHUB_COM_TOKEN)

renovate.json

{
    "dependencyDashboard": true,
    "dependencyDashboardAutoclose": true,
    "assignAutomerge": true,
    "reviewersFromCodeOwners": true,
    "semanticCommitType": true,
    "rebaseWhen": "behind-base-branch",
    "prCreation": "not-pending",
    "stabilityDays": 14,
    "gomod": {
        "enabled": true
    },
    "docker": {
        "enabled": true
    },
    "vulnerabilityAlerts": {
        "enabled": true,
        "labels": [
            "security"
        ]
    },
    "extends": [
        "schedule:earlyMondays"
    ],
    "packageRules": [
        {
            "updateTypes": [
                "patch"
            ],
            "automerge": true
        }
    ],
    "assignees": [
        "sheldonhull"
    ]
}