Update default.json

Signed-off-by: Todd Baert <todd.baert@dynatrace.com>

Author: toddbaert

default.json

@@ -18,14 +18,6 @@
     "groupName": "vulnerability-updates"
   },
   "packageRules": [
-    {
-      "description": "Automerge fixes for vulnerabilities",
-      "dependencyDashboardApproval": false,
-      "semanticCommitType": "fix",
-      "semanticCommitScope": "security",
-      "matchUpdateTypes": ["patch", "minor"],
-      "groupName": "vulnerability-updates"
-    },
     {
       "description": "Automerge minor updates if they are not 0.x releases",
       "dependencyDashboardApproval": true,
@@ -68,6 +60,14 @@
         "devDependencies"
       ],
       "automerge": true
+    },
+    {
+      "description": "Automerge fixes for vulnerabilities",
+      "dependencyDashboardApproval": false,
+      "semanticCommitType": "fix",
+      "semanticCommitScope": "security",
+      "matchUpdateTypes": ["patch", "minor"],
+      "groupName": "vulnerability-updates"
     }
   ]
 }