Use type ‘patch’ only when patch automerge is true AND minor automerge is not true.

npmjs’s CDN is (erroneously) returning 408 Timeout responses sometimes, so these should be retried.

chore: update dependency nock to v9.2.2

fix: update dependency pnpm to v1.35.1

Yarn v1.5.0 is marked as “latest” on npmjs but not as stable on yarn website or via native install methods such as brew on OSX.

Closes #1548

fix: update dependency yarn to v1.5.0

Before, we were attempting to rebase edited branches if renovate.json was the only modified file. This “lost” the committer information - which seemed ok - but it also meant that on the subsequent run it then assumed Renovate was the only committer. Now we don’t rebase edited onboarding branches anymore.

Closes #1360

Closes #1531

Adds configuration option `onboardingConfig` that allows the default onboarding config to be extended or replaced via `config.js` or env configuration.

Closes #1521

* Revert "fix: disable reusing existing package-lock.json when upgrading (#1530)"

This reverts commit 2728e399.

* switch from —package-lock-only to —ignore-scripts

Removing `--package-lock-only` option from npm installs due to https://github.com/npm/npm/issues/19852

Pretty sure this fixes #1495

Closes #1538

Fixes #1540

fix: update dependency pnpm to v1.33.2

Adds support for upgrading `node` version in `package.json` > `engines` if the current version is pinned.
- Does not convert from range to pin
- Ignores ranges
- Does not upgrade major versions