ci: replace dependabot with renovate (#4405)

3 files changed, 76 insertions, 38 deletions

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index c0d36a0b0..000000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,23 +0,0 @@
-version: 2
-updates:
-- package-ecosystem: cargo
-  directory: "/"
-  schedule:
-    interval: daily
-  open-pull-requests-limit: 10
-  labels:
-  - "\U0001F4E6 dependencies"
-- package-ecosystem: npm
-  directory: "/docs"
-  schedule:
-    interval: weekly
-  open-pull-requests-limit: 10
-  labels:
-  - "\U0001F4E6 dependencies"
-- package-ecosystem: github-actions
-  directory: "/"
-  schedule:
-    interval: daily
-  open-pull-requests-limit: 10
-  labels:
-  - "\U0001F4E6 dependencies"
diff --git a/.github/renovate.json5 b/.github/renovate.json5
new file mode 100644
index 000000000..455c7429b
--- /dev/null
+++ b/.github/renovate.json5
@@ -0,0 +1,76 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "extends": [
+        // stripped-down config:base
+        ":prHourlyLimit2",
+        ":prConcurrentLimit10",
+        "group:monorepos",
+        "group:recommended",
+        "workarounds:all",
+        // automerge minor updates
+        ":automergeMinor",
+    ],
+    "labels": ["📦 dependencies"],
+    "semanticCommits": "enabled",
+    "semanticCommitType": "build",
+    "rangeStrategy": "bump",
+    "packageRules": [
+        // group updates to related packages
+        {
+            "groupName": "clap crates",
+            "matchDatasources": ["crate"],
+            "matchPackagePrefixes": ["clap"]
+        },
+        {
+            "groupName": "gitoxide crates",
+            "matchDatasources": ["crate"],
+            "matchPackagePrefixes": ["git"]
+        },
+        {
+            "groupName": "pest crates",
+            "matchDatasources": ["crate"],
+            "matchPackagePrefixes": ["pest"]
+        },
+        {
+            "groupName": "toml crates",
+            "matchDatasources": ["crate"],
+            "matchPackagePrefixes": ["toml"]
+        },
+        {
+            "groupName": "unicode crates",
+            "matchDatasources": ["crate"],
+            "matchPackagePrefixes": ["unicode"]
+        },
+        {
+            "groupName": "dprint plugins",
+            "matchPackagePrefixes": ["dprint"],
+            "extends": ["schedule:weekly"]
+        },
+        {
+            "groupName": "npm",
+            "matchDatasources": ["npm"],
+            "extends": ["schedule:weekly"]
+        },
+        // Update (rust) lockfiles weekly
+        {
+            "matchDatasources": ["crate"],
+            "lockFileMaintenance": {
+                "enabled": true,
+                "extends": ["schedule:weekly"]
+            }
+        }
+    ],
+    // custom regex update managers
+    "regexManagers": [
+        {
+            "fileMatch": ["(^|\\/)\\.?dprint.json"],
+            "matchStrings": ["\"https://github.com/(?<depName>.+)/releases/download/(?<currentValue>.+)/plugin.wasm\""],
+            "datasourceTemplate": "github-releases"
+        },
+        {
+            "fileMatch": ["^(workflow-templates|\\.github\\/workflows)\\/[^/]+\\.ya?ml$"],
+            "matchStrings": ["cargo install.*--version (?<currentValue>\\S+).*\\s(?<depName>\\S+)"],
+            "datasourceTemplate": "crate"
+        }
+    ]
+}
diff --git a/.github/workflows/merge-dependabot.yml b/.github/workflows/merge-dependabot.yml
deleted file mode 100644
index f9c8f3aea..000000000
--- a/.github/workflows/merge-dependabot.yml
+++ /dev/null
@@ -1,15 +0,0 @@
-name: Auto-merge Dependabot PRs
-on:
-  schedule:
-    - cron: "0 * * * *"
-jobs:
-  auto_merge:
-    if: (github.event_name == 'schedule' && github.repository == 'starship/starship') || (github.event_name != 'schedule')
-    name: Auto-merge Dependabot PRs
-    runs-on: ubuntu-latest
-    steps:
-      - uses: akheron/dependabot-cron-action@d020867c009553e279f0200b621459444828a9b0
-        with:
-          token: ${{ secrets.DEPENDABOT_GITHUB_API_TOKEN }}
-          auto-merge: "minor"
-          merge-method: "squash"