chore: add renovate, required checks job

.github/workflows/ci.yaml

@@ -63,3 +63,17 @@ jobs:
 
       - name: Post Preview
         uses: monoweave/github-action-preview@95e30cfa4b8dfb69cb8d18050ef05a207c6f8551 # v1.1.0
+
+  required_checks:
+    name: Required Checks
+    needs:
+      - prepare
+      - build
+      - lint
+      - test
+    runs-on: ubuntu-latest
+    if: always()
+    steps:
+      - name: Fail on error
+        if: contains(needs.*.result, 'failure') || cancelled()
+        run: exit 1

.github/workflows/renovate.json5

@@ -0,0 +1,45 @@
+{
+    $schema: "https://docs.renovatebot.com/renovate-schema.json",
+    prConcurrentLimit: 2,
+    semanticCommits: "enabled",
+    semanticCommitType: "chore",
+    semanticCommitScope: "deps",
+    rangeStrategy: "bump",
+    rebaseWhen: "behind-base-branch",
+    separateMajorMinor: true,
+    separateMinorPatch: false,
+    stabilityDays: 21,
+    internalChecksFilter: "strict",
+    dependencyDashboard: true,
+    timezone: "America/Toronto",
+    addLabels: ["dependencies"],
+    automergeType: "pr",
+    automergeStrategy: "squash",
+    postUpdateOptions: ["yarnDedupeHighest"],
+    packageRules: [
+        {
+            groupName: "3rd Party Dependencies (Patch/Minor)",
+            matchManagers: ["npm"],
+            excludePackagePrefixes: ["@yarnpkg/"],
+            matchUpdateTypes: ["patch", "minor"],
+            matchCurrentVersion: "!/^0/",
+            addLabels: ["automerge"],
+            automerge: true,
+        },
+        {
+            groupName: "GitHub Actions",
+            matchManagers: ["github-actions"],
+            matchUpdateTypes: ["patch", "minor"],
+            matchCurrentVersion: "!/^0/",
+            addLabels: ["automerge"],
+            automerge: true,
+        },
+        {
+            description: "Ignore Engines Field",
+            matchPackageNames: ["node"],
+            matchManagers: ["npm"],
+            matchDepTypes: ["engines"],
+            enabled: false,
+        },
+    ],
+}