Replace Dependabot with Renovate

[mkilchhofer]

Background

We often receive a Dependabot PR where we manually need to ammend more things like

• run "go mod tidy"
• commit and push

Example PRs:

• build(deps): Bump github.com/hashicorp/terraform-plugin-framework from 1.10.0 to 1.12.0 #463
• build(deps): Bump github.com/hashicorp/terraform-plugin-go from 0.23.0 to 0.24.0 #462

Requested changes

I propose that we completely replace Dependabot with Renovate. Renovate offer much more flexibility like

• run "go mod tidy" before pushing the changes

• pin specific deps

• Replace massaging

  Replace massaging

  Renovate can massage replace statements it finds prior to running go commands, and then massage them back afterwards.
  This capability was added - and originally default behavior - because relative replace statements outside of the current repo will not work when Renovate clones the repo locally.

  On the other hand, this massaging of replace statements may lead to unexpected results, especially because go mod tidy may not fully tidy the go.sum if it is missing the replace directives in go.mod.
  It has therefore been disabled by default.

  To enable this replace massaging behavior, add gomodMassage to your postUpdateOptions array.

---

Created a discussion in the Slack channel to enable it for this repo:

https://cloud-native.slack.com/archives/C022F03E6BD/p1729502385131449

FYI @the-technat @oboukili @blakepettersson @onematchfox