chore: Configure Renovate

docs/DEVELOPING.md

@@ -334,7 +334,7 @@ pnpm install
 pnpm run check && pnpm run lint
 ```
 
-Commit `package.json` and `pnpm-lock.yaml`. Dependabot also opens bumps for these.
+Commit `package.json` and `pnpm-lock.yaml`. Renovate also opens bumps for these.
 
 ### FlatBuffers schemas
 

renovate.json

@@ -0,0 +1,41 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended",
+    ":semanticCommitTypeAll(chore)",
+    "helpers:pinGitHubActionDigests",
+    "schedule:weekly"
+  ],
+  "minimumReleaseAge": "3 days",
+  "packageRules": [
+    {
+      "description": "One PR for all non-major npm updates",
+      "matchManagers": ["npm"],
+      "matchUpdateTypes": ["minor", "patch"],
+      "groupName": "npm non-major"
+    },
+    {
+      "description": "One PR for all non-major Python updates",
+      "matchManagers": ["pip_requirements", "pep621"],
+      "matchUpdateTypes": ["minor", "patch"],
+      "groupName": "python non-major"
+    },
+    {
+      "description": "One PR for all GitHub Actions updates",
+      "matchManagers": ["github-actions"],
+      "matchDepTypes": ["action"],
+      "groupName": "github-actions"
+    },
+    {
+      "description": "pnpm overrides are security floors for transitive packages, not versions to bump",
+      "matchManagers": ["npm"],
+      "matchDepTypes": ["pnpm-workspace.overrides", "pnpm.overrides", "overrides"],
+      "enabled": false
+    },
+    {
+      "description": "Our own packages skip the release-age delay, as in pnpm-workspace.yaml",
+      "matchPackageNames": ["@openshock/**"],
+      "minimumReleaseAge": null
+    }
+  ]
+}

scripts/ci_build_gate.py

@@ -30,7 +30,7 @@
     re.compile(r'(^|/)\.gitkeep$'),
     re.compile(r'^\.claude/'),
     re.compile(r'^\.github/ISSUE_TEMPLATE/'),
-    re.compile(r'^\.github/dependabot\.yml$'),
+    re.compile(r'^renovate\.json$'),
     # Dev-only schema submodule and its codegen helpers; builds use the generated sources.
     re.compile(r'^schemas(/|$)'),
     re.compile(r'^scripts/(fetch_flatc\.py|generate_schemas\.py|flatc|flatc\.exe)$'),

scripts/tests/test_ci_build_gate.py

@@ -140,7 +140,7 @@ def test_nightly_with_unchanged_sha_skips():
     '.gitkeep',
     '.claude/settings.json',
     '.github/ISSUE_TEMPLATE/bug_report.yml',
-    '.github/dependabot.yml',
+    'renovate.json',
     'schemas',
     'schemas/HubToGatewayMessage.fbs',
     'scripts/fetch_flatc.py',