chore(ci): use renovate to keep deps up to date

Author: nickhudkins

Dockerfile

@@ -19,7 +19,8 @@ RUN apk update && apk --no-cache add gcc musl-dev openjdk17-jdk curl graphviz tt
 # Download plantuml file, Validate checksum & Move plantuml file
 RUN curl -o plantuml.jar -L https://github.com/plantuml/plantuml/releases/download/v1.2024.6/plantuml-1.2024.6.jar && echo "3e944755cbed59e1ed9332691d92294bef7bbcda  plantuml.jar" | sha1sum -c - && mv plantuml.jar /opt/plantuml.jar
 
-RUN pip install --upgrade pip && pip install mkdocs-techdocs-core==1.5.4
+COPY requirements.txt .
+RUN pip install --upgrade pip && pip install -r requirements.txt
 
 # Create script to call plantuml.jar from a location in path
 #   When adding TechDocs to the Backstage Backend container, avoid this

renovate.json

@@ -1,16 +1,52 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:best-practices", ":gitSignOff"],
-  "labels": ["dependencies"],
+  "extends": [
+    "config:best-practices",
+    ":gitSignOff"
+  ],
+  "labels": [
+    "dependencies"
+  ],
+  "enabledManagers": [
+    "dockerfile",
+    "pip_requirements"
+  ],
+  "dockerfile": {
+    "enabled": true
+  },
   "packageRules": [
     {
-      "matchUpdateTypes": ["major", "minor", "patch"],
-      "addLabels": ["{{ updateType }}"]
+      "description": "Automerge minor and patch updates for pip deps",
+      "matchManagers": [
+        "dockerfile"
+      ],
+      "matchUpdateTypes": [
+        "minor",
+        "patch"
+      ],
+      "addLabels": [
+        "{{ updateType }}"
+      ],
+      "automerge": true,
+      "automergeType": "pr"
+    },
+    {
+      "description": "Separate major updates - require manual review",
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "automerge": false,
+      "labels": [
+        "major-update",
+        "dependencies"
+      ]
     }
   ],
   "osvVulnerabilityAlerts": true,
   "vulnerabilityAlerts": {
-    "addLabels": ["security"],
+    "addLabels": [
+      "security"
+    ],
     "enabled": true
   }
-}
+}

requirements.txt

@@ -0,0 +1 @@
+mkdocs-techdocs-core==1.5.4