chore(renovate): prepare for operator (#11392)

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/11392
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
Co-committed-by: Michael Kriese <michael.kriese@visualon.de>

.forgejo/renovate.json

@@ -0,0 +1,161 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["local>forgejo/renovate-config"],
+  "ignorePresets": [
+    ":semanticPrefixFixDepsChoreOthers",
+    "docker:pinDigests",
+    "helpers:pinGitHubActionDigests"
+  ],
+  "baseBranchPatterns": [
+    "$default",
+    "/^v11\\.\\d+/forgejo$/",
+    "/^v14\\.\\d+/forgejo$/"
+  ],
+  "postUpdateOptions": ["gomodTidy", "gomodUpdateImportPaths", "npmDedupe"],
+  "prConcurrentLimit": 10,
+  "osvVulnerabilityAlerts": true,
+  "automergeStrategy": "squash",
+  "labels": ["dependency-upgrade", "test/not-needed"],
+  "packageRules": [
+    {
+      "description": "Require approval for python minor version",
+      "matchPackageNames": ["containerbase/python-prebuild", "python"],
+      "matchUpdateTypes": ["minor"],
+      "dependencyDashboardApproval": true
+    },
+    {
+      "description": "Require dashboard approval for some deps",
+      "matchPackageNames": [
+        "docker.io/bitnami/minio",
+        "github.com/go-ap/activitypub"
+      ],
+      "dependencyDashboardApproval": true
+    },
+    {
+      "description": "Schedule some deps less frequently",
+      "matchPackageNames": [
+        "code.forgejo.org/f3/gof3/**",
+        "github.com/google/pprof"
+      ],
+      "extends": ["schedule:quarterly"]
+    },
+    {
+      "description": "elasticsearch CI images are published about once a month and do not use semantic versioning or short tags",
+      "matchPackageNames": ["elasticsearch"],
+      "extends": ["schedule:quarterly"]
+    },
+    {
+      "description": "devcontainer is an optional tool used by some Forgejo contributors when working on the codebase",
+      "groupName": "devcontainer packages",
+      "extends": ["schedule:quarterly"],
+      "automerge": true,
+      "matchPackageNames": [
+        "ghcr.io/devcontainers/features/**",
+        "ghcr.io/devcontainers-contrib/features/**"
+      ]
+    },
+    {
+      "description": "x/tools/* are used in the CI only and upgraded together",
+      "matchUpdateTypes": ["minor", "patch", "digest"],
+      "automerge": true,
+      "groupName": "x/tools",
+      "matchPackageNames": ["golang.org/x/tools{/,}**"]
+    },
+    {
+      "description": "Group postcss minor and patch updates",
+      "extends": ["packages:postcss"],
+      "matchUpdateTypes": ["minor", "patch"],
+      "groupName": "postcss"
+    },
+    {
+      "description": "Group Forgejo go-chi packages",
+      "matchUpdateTypes": ["minor", "patch", "digest"],
+      "matchPackageNames": ["code.forgejo.org/go-chi/**"],
+      "groupName": "forgejo go-chi packages"
+    },
+    {
+      "description": "Split minor and patch updates",
+      "matchPackageNames": [
+        "containerbase/python-prebuild",
+        "github.com/urfave/cli/**",
+        "python",
+        "swagger-ui-dist",
+        "vue"
+      ],
+      "separateMinorPatch": true
+    },
+    {
+      "description": "Automerge patch updates",
+      "matchPackageNames": [
+        "vue",
+        "github.com/urfave/cli/**",
+        "swagger-ui-dist"
+      ],
+      "matchUpdateTypes": ["patch"],
+      "automerge": true
+    },
+    {
+      "description": "Add reviewer and additional labels to renovate PRs",
+      "matchDatasources": ["docker"],
+      "matchPackageNames": ["data.forgejo.org/renovate/renovate"],
+      "reviewers": ["viceice"],
+      "addLabels": ["forgejo/ci"]
+    },
+    {
+      "description": "Disable renovate self-updates for release branches",
+      "matchBaseBranches": ["/^v\\d+\\.\\d+\\/forgejo$/"],
+      "matchPackageNames": [
+        "code.forgejo.org/forgejo-contrib/renovate",
+        "data.forgejo.org/renovate/renovate",
+        "ghcr.io/visualon/renovate"
+      ],
+      "enabled": false
+    },
+    {
+      "description": "Automerge some packages when CI succeeds",
+      "extends": ["packages:linters", "packages:test", "schedule:monthly"],
+      "matchPackageNames": [
+        "@axe-core/playwright",
+        "@eslint-community/**",
+        "@playwright/**",
+        "@stoplight/spectral-cli",
+        "@stylistic/**",
+        "@vitejs/plugin-vue",
+        "@vue/test-utils",
+        "djlint",
+        "github.com/editorconfig-checker/editorconfig-checker/**",
+        "github.com/golangci/golangci-lint/**",
+        "github.com/go-testfixtures/testfixtures",
+        "github.com/PuerkitoBio/goquery",
+        "happy-dom",
+        "markdownlint-cli",
+        "mcr.microsoft.com/devcontainers/**",
+        "mvdan.cc/gofumpt",
+        "updates",
+        "vite-string-plugin",
+        "yamllint"
+      ],
+      "automerge": true
+    },
+    {
+      "description": "Disable indirect updates for stable branches",
+      "matchBaseBranches": ["/^v\\d+\\.\\d+\\/forgejo$/"],
+      "matchManagers": ["gomod"],
+      "matchUpdateTypes": ["major", "minor", "patch", "digest"],
+      "matchDepTypes": ["indirect"],
+      "enabled": false
+    },
+    {
+      "description": "Disable major updates for stable branches",
+      "matchBaseBranches": ["/^v\\d+\\.\\d+\\/forgejo$/"],
+      "matchUpdateTypes": ["major"],
+      "enabled": false
+    },
+    {
+      "description": "Require approval for stable branches (must be last rule to override all others)",
+      "matchBaseBranches": ["/^v\\d+\\.\\d+\\/forgejo$/"],
+      "dependencyDashboardApproval": true,
+      "schedule": ["at any time"]
+    }
+  ]
+}