INTEG-3242 - add renovate

.github/workflows/renovate.yml

@@ -0,0 +1,25 @@
+name: Renovate
+
+on:
+  schedule:
+    # Weekly on Sunday at 06:00 UTC
+    - cron: '0 6 * * 0'
+  workflow_dispatch:
+
+concurrency:
+  group: renovate
+  cancel-in-progress: false
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Run Renovate
+        uses: renovatebot/github-action@v46.1.17
+        with:
+          token: ${{ secrets.RENOVATE_TOKEN }}
+        env:
+          LOG_LEVEL: info

renovate.json

@@ -0,0 +1,47 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "prHourlyLimit": 0,
+  "osvVulnerabilityAlerts": true,
+  "vulnerabilityAlerts": {
+    "enabled": true
+  },
+  "packageRules": [
+    {
+      "enabled": false,
+      "matchPackageNames": [
+        "*"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "description": "Block major version updates globally"
+    },
+    {
+      "description": "PR priority: major updates",
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "prPriority": 10
+    },
+    {
+      "description": "PR priority: minor updates",
+      "matchUpdateTypes": [
+        "minor"
+      ],
+      "prPriority": 5
+    },
+    {
+      "description": "Group patch and minor updates into \"non-major dependencies\"",
+      "matchUpdateTypes": [
+        "patch",
+        "minor"
+      ],
+      "groupName": "non-major dependencies",
+      "groupSlug": "non-major",
+      "prPriority": 0
+    }
+  ],
+  "branchPrefix": "renovate/",
+  "onboarding": false,
+  "requireConfig": "required"
+}