ci: replace dependabot with renovate (#4405)

.dprint.json

@@ -39,9 +39,9 @@
     "target/"
   ],
   "plugins": [
-    "https://plugins.dprint.dev/typescript-0.68.2.wasm",
-    "https://plugins.dprint.dev/json-0.15.2.wasm",
-    "https://plugins.dprint.dev/markdown-0.13.2.wasm",
-    "https://plugins.dprint.dev/toml-0.5.4.wasm"
+    "https://github.com/dprint/dprint-plugin-typescript/releases/download/0.71.2/plugin.wasm",
+    "https://github.com/dprint/dprint-plugin-json/releases/download/0.15.5/plugin.wasm",
+    "https://github.com/dprint/dprint-plugin-markdown/releases/download/0.14.0/plugin.wasm",
+    "https://github.com/dprint/dprint-plugin-toml/releases/download/0.5.4/plugin.wasm"
   ]
 }

.github/dependabot.yml

@@ -1,23 +0,0 @@
-version: 2
-updates:
-- package-ecosystem: cargo
-  directory: "/"
-  schedule:
-    interval: daily
-  open-pull-requests-limit: 10
-  labels:
-  - "\U0001F4E6 dependencies"
-- package-ecosystem: npm
-  directory: "/docs"
-  schedule:
-    interval: weekly
-  open-pull-requests-limit: 10
-  labels:
-  - "\U0001F4E6 dependencies"
-- package-ecosystem: github-actions
-  directory: "/"
-  schedule:
-    interval: daily
-  open-pull-requests-limit: 10
-  labels:
-  - "\U0001F4E6 dependencies"

.github/renovate.json5

@@ -0,0 +1,76 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "extends": [
+        // stripped-down config:base
+        ":prHourlyLimit2",
+        ":prConcurrentLimit10",
+        "group:monorepos",
+        "group:recommended",
+        "workarounds:all",
+        // automerge minor updates
+        ":automergeMinor",
+    ],
+    "labels": ["📦 dependencies"],
+    "semanticCommits": "enabled",
+    "semanticCommitType": "build",
+    "rangeStrategy": "bump",
+    "packageRules": [
+        // group updates to related packages
+        {
+            "groupName": "clap crates",
+            "matchDatasources": ["crate"],
+            "matchPackagePrefixes": ["clap"]
+        },
+        {
+            "groupName": "gitoxide crates",
+            "matchDatasources": ["crate"],
+            "matchPackagePrefixes": ["git"]
+        },
+        {
+            "groupName": "pest crates",
+            "matchDatasources": ["crate"],
+            "matchPackagePrefixes": ["pest"]
+        },
+        {
+            "groupName": "toml crates",
+            "matchDatasources": ["crate"],
+            "matchPackagePrefixes": ["toml"]
+        },
+        {
+            "groupName": "unicode crates",
+            "matchDatasources": ["crate"],
+            "matchPackagePrefixes": ["unicode"]
+        },
+        {
+            "groupName": "dprint plugins",
+            "matchPackagePrefixes": ["dprint"],
+            "extends": ["schedule:weekly"]
+        },
+        {
+            "groupName": "npm",
+            "matchDatasources": ["npm"],
+            "extends": ["schedule:weekly"]
+        },
+        // Update (rust) lockfiles weekly
+        {
+            "matchDatasources": ["crate"],
+            "lockFileMaintenance": {
+                "enabled": true,
+                "extends": ["schedule:weekly"]
+            }
+        }
+    ],
+    // custom regex update managers
+    "regexManagers": [
+        {
+            "fileMatch": ["(^|\\/)\\.?dprint.json"],
+            "matchStrings": ["\"https://github.com/(?<depName>.+)/releases/download/(?<currentValue>.+)/plugin.wasm\""],
+            "datasourceTemplate": "github-releases"
+        },
+        {
+            "fileMatch": ["^(workflow-templates|\\.github\\/workflows)\\/[^/]+\\.ya?ml$"],
+            "matchStrings": ["cargo install.*--version (?<currentValue>\\S+).*\\s(?<depName>\\S+)"],
+            "datasourceTemplate": "crate"
+        }
+    ]
+}

.github/workflows/merge-dependabot.yml

@@ -1,15 +0,0 @@
-name: Auto-merge Dependabot PRs
-on:
-  schedule:
-    - cron: "0 * * * *"
-jobs:
-  auto_merge:
-    if: (github.event_name == 'schedule' && github.repository == 'starship/starship') || (github.event_name != 'schedule')
-    name: Auto-merge Dependabot PRs
-    runs-on: ubuntu-latest
-    steps:
-      - uses: akheron/dependabot-cron-action@d020867c009553e279f0200b621459444828a9b0
-        with:
-          token: ${{ secrets.DEPENDABOT_GITHUB_API_TOKEN }}
-          auto-merge: "minor"
-          merge-method: "squash"