chore(renovate): align the Renovate config with openaev (#174)

renovate.json5

@@ -0,0 +1,68 @@
+{
+    $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+    extends: [
+        'config:recommended',
+        'docker:enableMajor',
+        ':semanticCommits',
+    ],
+    labels: [
+        'dependencies',
+        'filigran team',
+    ],
+    minimumReleaseAge: '3 days',
+    prHourlyLimit: 100,
+    prConcurrentLimit: 60,
+    branchConcurrentLimit: 60,
+    timezone: 'Europe/Paris',
+    schedule: [
+        '* 0-4,22-23 * * 1-5',
+        '* * * * 0,6',
+    ],
+    updateNotScheduled: false,
+    rebaseWhen: 'conflicted',
+    vulnerabilityAlerts: {
+        // as we don't rely on Renovate to be informed of dependency security advisories,
+        // vulnerabilityAlerts is disabled since it can cause problems by skipping minimumReleaseAge, schedule and others constraints
+        enabled: false,
+    },
+    packageRules: [
+        {
+            matchDatasources: [
+                'docker',
+            ],
+            commitMessagePrefix: 'chore(docker):',
+        },
+        {
+            description: 'Majors are proposed on the Dependency Dashboard, not as a standing PR',
+            matchUpdateTypes: [
+                'major',
+            ],
+            dependencyDashboardApproval: true,
+        },
+        {
+            groupName: 'ci tooling (non-major)',
+            groupSlug: 'ci-tooling-non-major',
+            description: 'Batch non-major GitHub Actions updates once a week on Sunday',
+            schedule: [
+                '* * * * 0',
+            ],
+            matchManagers: [
+                'github-actions',
+            ],
+            matchUpdateTypes: [
+                'minor',
+                'patch',
+                'pin',
+                'digest',
+            ],
+            rebaseWhen: 'auto',
+        },
+        {
+            description: 'docker.elastic.co publishes no release timestamp, so minimumReleaseAge would hold every update as pending',
+            matchPackageNames: [
+                'docker.elastic.co/**',
+            ],
+            minimumReleaseAge: null,
+        },
+    ],
+}