ci: require manual approval for NPM updates on non-main branches

Previously, NPM updates were entirely disabled on branches other than main. This change modifies the Renovate configuration to require manual approval for these updates instead of disabling them. This allows for important bug fixes to be manually selected while preventing automatic updates.

Additionally, the rule that groups all non-major dependencies for updates has been updated to explicitly apply only to the main branch.

Author: alan-agius4

renovate-presets/default.json5

@@ -56,13 +56,15 @@
       matchManagers: ['bazel', 'bazel-module', 'bazelisk'],
     },
 
-    // Rule to disable NPM updates on branches other than 'main'.
-    // But allow updating engines and packageManagers.
+    // Rule to require manual approval for NPM updates on branches other than 'main'.
+    // This is to prevent auto updates to branches that are not the main branch.
+    // But, still allows the updates to be manually selected in case of an important bug fix.
+    // Engines and packageManagers are excluded from this rule.
     {
-      enabled: false,
       matchBaseBranches: ['!main'],
-      matchDepNames: ['!node', '!pnpm', '!npm', '!yarn'],
+      matchDepNames: ['*', '!node', '!pnpm', '!npm', '!yarn'],
       matchManagers: ['npm'],
+      dependencyDashboardApproval: true,
     },
 
     // Group all non-major dependencies together for updates.
@@ -71,6 +73,7 @@
       matchDepNames: ['*', '!node', '!pnpm', '!npm', '!yarn'],
       matchUpdateTypes: ['digest', 'patch', 'minor'],
       matchManagers: ['npm'],
+      matchBaseBranches: ['main'],
     },
 
     // ============================================================================