Migrate from Dependabot to Renovate

.github/workflows/renovate-approve-pr.yaml

@@ -0,0 +1,27 @@
+name: "Approve and auto-merge Renovate Pull Requests with automerge label"
+
+on:
+  pull_request:
+    branches:
+      - main
+
+env:
+  PR_URL: ${{github.event.pull_request.html_url}}
+  # By default, the GitHub Actions workflow will get a GITHUB_TOKEN with read-only permissions.
+  GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+
+permissions:
+  # This Allows the GITHUB_TOKEN to approve pull requests
+  pull-requests: write
+  # This Allows the GITHUB_TOKEN to auto merge pull requests
+  contents: write
+
+jobs:
+  approve-pr:
+    runs-on: ubuntu-latest
+    if: ${{ (github.actor == 'team-builds-bot') && contains(github.event.pull_request.labels.*.name, 'autoapprove') }}
+    steps:
+      - name: Approve a renovate PR with the 'autoapprove' label
+        run: gh pr review --approve "$PR_URL"
+      - name: Enable auto-merge for the PR
+        run: gh pr merge --auto --squash "$PR_URL"

.github/workflows/renovate.yaml

@@ -0,0 +1,30 @@
+name: Renovate Update dependencies
+on:
+  schedule:
+    - cron: "20 10 * * *"
+  pull_request: # limit this to run on PRs that modify Renovate config files
+    paths:
+      - ".github/workflows/renovate.yaml"
+      - "renovate.json"
+  push:
+    branches:
+      - main
+    paths:
+      - ".github/workflows/renovate.yaml"
+      - "renovate.json"
+jobs:
+  renovate:
+    name: Check Dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+      - name: Run Renovate
+        uses: renovatebot/github-action@v46.1.19
+        with:
+          token: ${{ secrets.RENOVATE_GITHUB_TOKEN }}
+          configurationFile: renovate.json
+        env:
+          RENOVATE_REPOSITORIES: ${{ github.repository }}
+          LOG_LEVEL: ${{ github.ref_name == 'main' && 'INFO' || 'DEBUG' }}
+          RENOVATE_BASE_BRANCHES: main

renovate.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "labels": [
+    "dependencies",
+    "autoapprove",
+    "{{datasource}}"
+  ],
+  "rebaseWhen": "conflicted",
+  "assigneesFromCodeOwners": true,
+  "prConcurrentLimit": 1,
+  "minimumReleaseAge": "3 days"
+}