Configure Renovate (#142)

* Add renovate.json

* feat: setup renovate

* Potential fix for code scanning alert no. 3: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Jakub Novak <jakub@e2b.dev>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: 3 people

.github/workflows/validate-renovate-config.yaml

@@ -0,0 +1,18 @@
+name: validate renovate config
+
+on:
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  validate-renovate-config:
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Validate Renovate config
+        uses: suzuki-shunsuke/github-action-renovate-config-validator@v2.0.0

renovate.json5

@@ -0,0 +1,36 @@
+// configuration options: https://docs.renovatebot.com/configuration-options/
+// list of all presets: https://docs.renovatebot.com/presets-default/
+{
+  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+  extends: ['config:recommended', ':automergeRequireAllStatusChecks'],
+  dependencyDashboard: true,
+  // let it fly for now, we've got a lot to catch up on
+  //  schedule: [
+  //    "0 * * * *"
+  //  ],
+  timezone: 'UTC',
+  // Always squash PRs when automerging
+  automergeType: 'pr',
+  automergeStrategy: 'squash',
+  packageRules: [
+    {
+      description: 'Group and automerge patch updates after CI passes',
+      matchUpdateTypes: ['patch'],
+      automerge: true,
+      groupName: 'patch-updates',
+    },
+    {
+      description: 'Create PRs for minor updates without automerge',
+      matchUpdateTypes: ['minor'],
+      automerge: false,
+    },
+    {
+      description: 'Require dashboard approval for major updates',
+      matchUpdateTypes: ['major'],
+      dependencyDashboardApproval: true,
+      automerge: false,
+    },
+  ],
+  prConcurrentLimit: 3,
+  rebaseWhen: 'auto',
+}