ci: renovate for dependency update (#4)

.github/renovate.json5

@@ -0,0 +1,32 @@
+{
+  "extends": [
+    "config:base",
+    "docker:pinDigests",
+    "helpers:pinGitHubActionDigests"
+  ],
+  "dependencyDashboard": true,
+  "labels": [
+    "dependencies"
+  ],
+  "semanticCommits": "enabled",
+  "packageRules": [
+    {
+      "matchPackagePatterns": [
+        "*"
+      ],
+      "matchUpdateTypes": [
+        "minor",
+        "patch",
+        "digest",
+        "pinDigest",
+        "pin"
+      ],
+      "groupName": "all non-major dependencies",
+      "groupSlug": "all-minor-patch-digest-pin"
+    },
+  ],
+  "postUpdateOptions": [
+    "gomodTidy",
+    "gomodUpdateImportPaths"
+  ]
+}

.github/workflows/deps-renovate.yaml

@@ -0,0 +1,18 @@
+name: Deps - Renovate
+
+on:
+  pull_request:
+    paths:
+    - '.github/renovate.json5'
+  workflow_dispatch: { }
+
+jobs:
+  check:
+    name: Check renovate config 
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+    - name: Validate renovate config
+      uses: docker://renovate/renovate
+      with:
+        args: renovate-config-validator