ci: add renovate config

.github/renovate.json

@@ -0,0 +1,165 @@
+{
+	"$schema": "https://docs.renovatebot.com/renovate-schema.json",
+	"extends": [
+		"config:recommended",
+		"helpers:pinGitHubActionDigests",
+		":dependencyDashboard",
+		":semanticCommits",
+		":gitSignOff"
+	],
+	"timezone": "Europe/Vienna",
+	"schedule": [
+		"before 5am on wednesday"
+	],
+	"labels": [
+		"dependencies",
+		"3. to review"
+	],
+	"dependencyDashboardApproval": true,
+	"commitMessageAction": "Bump",
+	"commitMessageTopic": "{{depName}}",
+	"commitMessageExtra": "from {{currentVersion}} to {{#if isPinDigest}}{{{newDigestShort}}}{{else}}{{#if isMajor}}{{prettyNewMajor}}{{else}}{{#if isSingleVersion}}{{prettyNewVersion}}{{else}}{{#if newValue}}{{{newValue}}}{{else}}{{{newDigestShort}}}{{/if}}{{/if}}{{/if}}{{/if}}",
+	"rangeStrategy": "bump",
+	"rebaseWhen": "conflicted",
+	"ignoreUnstable": false,
+	"baseBranches": [
+		"master",
+		"stable31",
+		"stable30"
+	],
+	"enabledManagers": [
+		"composer",
+		"github-actions",
+		"npm"
+	],
+	"ignoreDeps": [
+		"node",
+		"npm",
+		"php",
+		"postcss-loader"
+	],
+	"packageRules": [
+		{
+			"description": "Request JavaScript reviews",
+			"matchManagers": [
+				"npm"
+			],
+			"reviewers": [
+				"@ChristophWurst",
+				"@GretaD"
+			]
+		},
+		{
+			"description": "Ignore Vue 3 packages",
+			"matchManagers": [
+				"npm"
+			],
+			"matchPackageNames": [
+				"vue"
+			],
+			"allowedVersions": "<3.0"
+		},
+		{
+			"description": "Ignore Vue 3 packages",
+			"matchManagers": [
+				"npm"
+			],
+			"matchPackageNames": [
+				"vue-router"
+			],
+			"allowedVersions": "<4.0"
+		},
+		{
+			"description": "Ignore Vue 3 packages",
+			"matchManagers": [
+				"npm"
+			],
+			"matchPackageNames": [
+				"@vue/test-utils"
+			],
+			"allowedVersions": "<2.0"
+		},
+		{
+			"description": "Ignore Vue 3 packages",
+			"matchManagers": [
+				"npm"
+			],
+			"matchPackageNames": [
+				"vuex"
+			],
+			"allowedVersions": "<4.1.0"
+		},
+		{
+			"description": "Ignore Vue 3 packages",
+			"matchManagers": [
+				"npm"
+			],
+			"matchPackageNames": [
+				"vue-loader"
+			],
+			"allowedVersions": "<16.0.0"
+		},
+		{
+			"description": "Bump Github actions monthly and request reviews",
+			"matchManagers": [
+				"github-actions"
+			],
+			"extends": [
+				"schedule:monthly"
+			]
+		},
+		{
+			"matchUpdateTypes": [
+				"minor",
+				"patch"
+			],
+			"matchCurrentVersion": "!/^0/",
+			"automerge": true,
+			"automergeType": "pr",
+			"platformAutomerge": true,
+			"labels": [
+				"dependencies",
+				"4. to release"
+			],
+			"reviewers": []
+		},
+		{
+			"description": "Only automerge packages that follow semver",
+			"matchPackageNames": [
+				"@nextcloud/vue",
+				"friendsofphp/php-cs-fixer"
+			],
+			"automerge": false,
+			"labels": [
+				"dependencies",
+				"3. to review"
+			],
+			"reviewers": [
+				"@ChristophWurst"
+			]
+		},
+		{
+			"enabled": false,
+			"matchBaseBranches": "/^stable(.)+/"
+		},
+		{
+			"matchBaseBranches": [
+				"master"
+			],
+			"matchDepTypes": [
+				"devDependencies"
+			],
+			"extends": [
+				"schedule:monthly"
+			]
+		}
+	],
+	"vulnerabilityAlerts": {
+		"enabled": true,
+		"semanticCommitType": "fix",
+		"schedule": "before 7am every weekday",
+		"dependencyDashboardApproval": false,
+		"commitMessageSuffix": ""
+	},
+	"osvVulnerabilityAlerts": true
+}