Configure Renovate (#10)

* Add renovate.json

* Configure renovate.

Signed-off-by: Michael Johansen <[email protected]>

---------

Signed-off-by: Michael Johansen <[email protected]>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Johansen <[email protected]>

Author: renovate[bot]

.github/renovate.json5

@@ -0,0 +1,50 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "branchPrefix": "users/renovate/",
+  "timezone": "US/Central",
+  "extends": [
+    "config:recommended", 
+    "helpers:pinGitHubActionDigestsToSemver",
+    ":enableVulnerabilityAlerts"
+  ],
+  "git-submodules": {
+    "automerge": true,
+    "enabled": true
+  },
+  "packageRules": [
+    {
+      // Update ni-apis on early Monday mornings.
+      "matchDepNames": ["third_party/ni-apis"],
+      "extends": ["schedule:weekly"]
+    },
+    {
+      // Update GitHub Actions on weekends.
+      "matchManagers": ["github-actions"],
+      "groupName": "GitHub Actions",
+      "groupSlug": "github",
+      "schedule": [
+        "* * * * 0,6"
+      ]
+    },
+    {
+      // Update Python packages on weekends, separate from lockFileMaintenance.
+      "matchCategories": ["python"],
+      "matchUpdateTypes": ["major", "minor", "patch", "rollback", "replacement"],
+      "groupName": "Python packages",
+      "groupSlug": "python",
+      "schedule": [
+        "* * * * 0,6"
+      ]
+    }
+  ],
+  "lockFileMaintenance": {
+    // Maintain lock files on early Tuesday mornings. This is primarily to
+    // update indirect dependencies that aren't handled by the Python packages
+    // group.
+    "enabled": true,
+    "schedule": [
+      "* 0-3 * * 2"
+    ]
+  },
+  "osvVulnerabilityAlerts": true
+}