Drop Dependabot in favour of Renovate

.just/gh.justfile

@@ -230,16 +230,16 @@ gh-browse-wiki:
     gh browse --wiki
 
 
-# list dependabot PRs
+# list renovate PRs
 [group: 'gh']
-gh-pr-list-dependabot limit="10":
-    gh pr list --author app/dependabot --limit {{limit}}
+gh-pr-list-renovate limit="10":
+    gh pr list --author app/renovate --limit {{limit}}
 
 
-# list all dependabot PRs (including closed)
+# list all renovate PRs (including closed)
 [group: 'gh']
-gh-pr-list-dependabot-all limit="20":
-    gh pr list --state all --author app/dependabot --limit {{limit}}
+gh-pr-list-renovate-all limit="20":
+    gh pr list --state all --author app/renovate --limit {{limit}}
 
 
 # view GitHub Actions usage (billing)

renovate.json

@@ -2,5 +2,54 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:recommended"
+  ],
+  "labels": [
+    "dependencies"
+  ],
+  "lockFileMaintenance": {
+    "enabled": true,
+    "schedule": [
+      "* 0-3 1 * *"
+    ]
+  },
+  "packageRules": [
+    {
+      "description": "Label GitHub Actions updates",
+      "matchManagers": [
+        "github-actions"
+      ],
+      "addLabels": [
+        "github_actions"
+      ]
+    },
+    {
+      "description": "Label Python dependency updates",
+      "matchManagers": [
+        "pep621"
+      ],
+      "addLabels": [
+        "python",
+        "uv"
+      ]
+    },
+    {
+      "description": "Auto-merge minor and patch updates once all checks pass (replaces the Dependabot auto-merge workflow)",
+      "matchUpdateTypes": [
+        "minor",
+        "patch"
+      ],
+      "automerge": true,
+      "automergeType": "pr",
+      "automergeStrategy": "squash",
+      "platformAutomerge": false
+    },
+    {
+      "description": "myst-parser >= 5 requires Python >= 3.11; keep the pin for Python < 3.10 as is",
+      "matchPackageNames": [
+        "myst-parser"
+      ],
+      "matchCurrentValue": "/< 4\\.0/",
+      "enabled": false
+    }
   ]
 }