Merge pull request #124 from leanix/feature/CMP-70-secure-npm-dependencies

CMP-70 Enforce secure NPM dependency practices

Author: ama-leanix

.npmrc

@@ -0,0 +1 @@
+save-exact=true

renovate.json

@@ -1,13 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:js-app", "group:allNonMajor"],
+  "extends": ["config:js-app", "group:allNonMajor", "github>leanix/.github"],
   "timezone": "Europe/Berlin",
-  "packageRules": [
-    {
-      "updateTypes": ["minor", "patch"],
-      "automerge": true,
-      "automergeSchedule": ["after 10am and before 4pm every weekday"]
-    }
-  ],
   "prConcurrentLimit": 2
 }