Merge pull request #12 from TomTonic/dependabot2renovate

Switch from Dependabot to Renovate

Author: TomTonic

.github/dependabot.yml

@@ -0,0 +1,89 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended",
+    "security:openssf-scorecard"
+  ],
+  "reviewers": [
+    "TomTonic"
+  ],
+  "labels": [
+    "dependencies"
+  ],
+  "commitMessagePrefix": "deps-upd:",
+  "commitMessageAction": "Update",
+  "timezone": "Europe/Berlin",
+  "schedule": [
+    "before 6am"
+  ],
+  "prHourlyLimit": 2,
+  "prConcurrentLimit": 5,
+  "packageRules": [
+    {
+      "matchCategories": [
+        "golang"
+      ],
+      "minimumReleaseAge": "2 days"
+    },
+    {
+      "matchManagers": [
+        "gomod"
+      ],
+      "groupName": "Go dependencies",
+      "minimumReleaseAge": "1 days"
+    },
+    {
+      "matchManagers": [
+        "github-actions"
+      ],
+      "groupName": "GitHub Actions",
+      "schedule": [
+        "before 4pm on friday"
+      ],
+      "minimumReleaseAge": "1 days"
+    },
+    {
+      "matchUpdateTypes": [
+        "patch",
+        "pin",
+        "digest"
+      ],
+      "automerge": true,
+      "automergeType": "pr"
+    },
+    {
+      "matchUpdateTypes": [
+        "minor"
+      ],
+      "automerge": false,
+      "reviewersFromCodeOwners": true
+    },
+    {
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "automerge": false,
+      "reviewersFromCodeOwners": true,
+      "labels": [
+        "dependencies",
+        "breaking-change"
+      ]
+    }
+  ],
+  "vulnerabilityAlerts": {
+    "enabled": true,
+    "labels": [
+      "security",
+      "dependencies"
+    ],
+    "assignees": [
+      "TomTonic"
+    ]
+  },
+  "lockFileMaintenance": {
+    "enabled": true,
+    "schedule": [
+      "before 6am"
+    ]
+  }
+}