chore(renovate): automerge minor and patch dev dependency updates

renovate.json5

@@ -60,6 +60,25 @@
        */
       minimumReleaseAge: "3 days"
     },
+    {
+      /**
+       * Automerge minor and patch updates once CI passes. Majors still need
+       * a review. With platformAutomerge off, Renovate merges the PR itself
+       * and waits for every check, including ones that aren't required.
+       */
+      matchPackageNames: [
+        "vitest",
+        "@playwright/test",
+        "@axe-core/playwright",
+        "playwright-core",
+        "@types/node",
+        "github/codeql-action",
+        "actions/*"
+      ],
+      matchUpdateTypes: ["minor", "patch"],
+      automerge: true,
+      platformAutomerge: false
+    },
     {
       /**
        * The built-in Docker manager tracks the mcr.microsoft.com/playwright tag