Setup Renovate (#960)

* remove dependabot

* added renovate configs

* added renovatebot user

* added renovatebot user

* Fixed filematch

* Upgraded package deps for security

* Upgraded package deps for security

Author: nevoodoo

.github/dependabot.yml

@@ -0,0 +1,44 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "onboarding": true,
+    "requireConfig": "ignored",
+    "platform": "github",
+    "repositories": ["populationgenomics/metamist"],
+    "prConcurrentLimit": 10,
+    "prHourlyLimit": 5,
+    "semanticCommits": "enabled",
+    "enabledManagers": ["pip-compile"],
+    "constraints": {
+      "python": "==3.11"
+    },
+    "platformCommit": "enabled",
+    "pip-compile": {
+      "fileMatch": ["^requirements\\.txt$", "^requirements-dev\\.txt$"],
+      "lockFileMaintenance": {
+        "enabled": true,
+        "branchTopic": "pip-compile-refresh",
+        "commitMessageAction": "Refresh pip-compile outputs"
+      }
+    },
+    "packageRules": [
+      {
+        "groupName": "all non-major dependencies",
+        "groupSlug": "all-minor-patch",
+        "matchUpdateTypes": [
+          "minor",
+          "patch"
+        ],
+        "matchPackagePatterns": ["*"],
+        "minimumReleaseAge": "48 hours"
+      },
+      {
+        "groupName": "all major dependencies",
+        "groupSlug": "all-major",
+        "matchUpdateTypes": [
+          "major"
+        ],
+        "matchPackagePatterns": ["*"],
+        "minimumReleaseAge": "48 hours"
+      }
+    ]
+  }

.github/renovate-config.json

@@ -0,0 +1,35 @@
+name: Renovate
+on:
+  schedule:
+    - cron: '0 0 * * Sun'
+  push:
+    branches:
+      - dev
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.RENOVATE_APP_ID }}
+          private-key: ${{ secrets.RENOVATE_PRIVATE_KEY }}
+
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Self-hosted Renovate
+        uses: renovatebot/[email protected]
+        with:
+          token: '${{ steps.app-token.outputs.token }}'
+          docker-user: root
+          configurationFile: .github/renovate-config.json
+        env:
+          LOG_LEVEL: 'debug'
+          RENOVATE_PLATFORM_COMMIT: 'true'

.github/workflows/compile_requirements.yaml

@@ -417,7 +417,7 @@ starlette==0.38.4
     # via
     #   fastapi
     #   strawberry-graphql
-strawberry-graphql[debug-server,fastapi]==0.235.1
+strawberry-graphql[debug-server,fastapi]==0.243.0
     # via
     #   -r requirements-dev.in
     #   -r requirements.in

.github/workflows/renovate.yaml

@@ -15,7 +15,7 @@ google-cloud-pubsub==2.18.3
 google-cloud-storage==1.43.0
 uvicorn==0.29.0
 fastapi[all]==0.112.2
-strawberry-graphql[fastapi]==0.235.1
+strawberry-graphql[fastapi]==0.243.0
 databases[mysql]==0.9.0
 cryptography>=41.0.0
 python-dateutil==2.8.2

requirements-dev.txt

@@ -300,7 +300,7 @@ sqlalchemy==2.0.34
     # via databases
 starlette==0.38.4
     # via fastapi
-strawberry-graphql[fastapi]==0.235.1
+strawberry-graphql[fastapi]==0.243.0
     # via -r requirements.in
 tabulate==0.9.0
     # via cpg-utils