Dependency specific configuration does not override general configuration

[mrolappe-o21]

Hej there,

when setting up a given configuration my intention was to have only PRs for patch version changes auto-merged for specific dependencies. My impression was that a corresponding dependency_name configuration would be the solution here. But I found out that a more general configuration was overriding the specific configuration.

title: "build(deps): bump springBootVersion from 2.5.6 to 2.6.0"
depName: springBootVersion
from: 2.5.6
to: 2.6.0
dependency type: production
security critical: false
config: springBootVersion:semver:patch
config: production:security:minor
config: production:semver:minor
production:semver:minor detected, will auto-merge