ci: config for renovate

* Renovate Github app needs to be enabled for this repo
* PRs by dependabot need to be disabled
(but keep vulnerability alerts enabled, renovate will read them)

Author: melanger

renovate.json

@@ -0,0 +1,26 @@
+{
+	"$schema": "https://docs.renovatebot.com/renovate-schema.json",
+	"extends": [
+		"config:best-practices",
+		"config:js-app",
+		":automergeLinters",
+		":automergeRequireAllStatusChecks",
+		":maintainLockFilesMonthly",
+		":semanticCommits",
+		":label(dependencies)",
+		":enableVulnerabilityAlertsWithLabel(security)",
+	],
+	"minimumReleaseAge": 3,
+	"osvVulnerabilityAlerts": true,
+	"packageRules": [
+		{
+			"dependencyDashboardApproval": true,
+			"matchUpdateTypes": [
+				"major",
+				"minor",
+				"patch",
+				"digest"
+			]
+		}
+	]
+}