feat: Integrated Renovate Bot as gh action (#9)

.github/renovate-entrypoint.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+set -e
+
+echo "=== Starting Renovate Bot ==="
+
+apt update
+apt install -y build-essential libpq-dev
+
+runuser -u ubuntu renovate --platform=github
+
+echo "=== Renovate Bot finished ==="

.github/workflows/renovate.yml

@@ -0,0 +1,24 @@
+name: Renovate
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 2 * * 1'
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  renovate:
+    runs-on: self-hosted
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Run Self-Hosted Renovate
+        uses: renovatebot/github-action@v43.0.12
+        with:
+          docker-cmd-file: .github/renovate-entrypoint.sh
+          docker-user: root
+          token: ${{ secrets.GITHUB_TOKEN }}

renovate.json

@@ -0,0 +1,14 @@
+{
+  "extends": ["config:base"],
+  "labels": ["dependencies", "renovate"],
+  "packageRules": [
+    {
+      "managers": ["pip_requirements"],
+      "updateTypes": ["minor", "patch"],
+      "automerge": false,
+      "groupName": "Python dependencies"
+    }
+  ],
+  "prConcurrentLimit": 5,
+  "prHourlyLimit": 2
+}