github: Reconfigure Renovate to defer updates until lock file maintenance except for security updates (#87)

Author: bkeryan

.github/renovate.json

@@ -0,0 +1,21 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "branchPrefix": "users/renovate/",
+  "extends": [
+    "config:recommended",
+    ":maintainLockFilesWeekly",
+    ":automergePatch",
+    "schedule:automergeDaily",
+    "helpers:pinGitHubActionDigestsToSemver",
+    ":enableVulnerabilityAlerts"
+  ],
+  "packageRules": [
+    {
+      // Do not update Python packages when new versions are released. Instead,
+      // let lock file maintenance update them once a week.
+      "enabled": false,
+      "matchCategories": ["python"]
+    }
+  ],
+  "osvVulnerabilityAlerts": true
+}