Remove dependabot, add renovate

[BryceRussell]

Dependabot is annoying, let's use renovate instead

[altsalt]

Okay, I've explored Renovate a bit more. It seems like we'll want to use the "Mend Renovate App" which is the hosted GitHub version.

Initial Setup

1. Navigate to https://github.com/apps/renovate and select the Install button
2. Choose "Only select repositories" and select the ATP repos (and any others you'd like)
3. A "Configure Renovate" Pull Request will be opened
4. Edit the Renovate configuration within the renovate/configure branch
   • The configuration defaults to renovate.json in the root directory, this can be replaced by a variety of things, but in this case the only one we might want to go with is .github/renovate.json
   • Here is a list of some commonly overridden settings and a full list can be found here
   • Also consider whether the default preset is appropriate, perhaps add the npm one if it is auto-configured
5. Renovate will not make any changes to the repository until after the onboarding Pull Request is merged
   • Warnings and errors should be fixed on the base branch (e.g., main)

Future Reconfiguration

1. Create a new branch
2. Edit the Renovate configuration file
3. Validate the config with npx --yes --package renovate -- renovate-config-validator
4. Merge the branch into mainline

---

That's all for now. Here's a good landing page for pursuing more documentation: https://docs.renovatebot.com/reading-list/

Of note, you might want to review:

• Suggested best practices
• Ways to reduce noisiness
• Details about the dependency dashboard
• How to batch updates

[altsalt]

Oh, and here's an example config file that seems like it may include things we'd like: https://github.com/peterhirn/renovate-astro/blob/main/renovate.json