feature/mx-1579 switch to renovatebot (#16)

# Added
- add renovate config and github action

# Changes
- switch version specifiers to exact matches for renovatebot

# Removed
- delete dependabot config

CHANGELOG.md

@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - add review assignment to mex-template itself
 - add code of conduct file to mex-template itself
 - add badges for open-code and cookiecutter
+- add renovate config and github action
 
 ### Changes
 
@@ -25,11 +26,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - clean up and expand pdm scripts
 - improve and simplify mex.bat and makefile
 - update pdm, ruff and pre-commit
+- switch version specifiers to exact matches for renovatebot
 
 ### Deprecated
 
 ### Removed
 
+- delete dependabot config
+
 ### Fixed
 
 - fix finding of rejected cruft files

mex-{{ cookiecutter.project_name }}/.github/workflows/renovatebot.yml

@@ -0,0 +1,28 @@
+name: Renovate
+
+on:
+  push:
+    branches: ["main"]
+  schedule:
+    # * is a special character in YAML so you have to quote this string
+    - cron: "14 3 * * 1-5"
+  workflow_dispatch:
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Run renovatebot
+        uses: renovatebot/[email protected]
+        env:
+          RENOVATE_GIT_PRIVATE_KEY: {% raw %}${{ secrets.GPG_SIGNING_KEY }}{% endraw %}
+          RENOVATE_REPOSITORIES: "robert-koch-institut/mex-{{ cookiecutter.project_name }}"
+        with:
+          configurationFile: renovate.json
+          token: {% raw %}${{ secrets.WORKFLOW_TOKEN }}{% endraw %}

mex-{{ cookiecutter.project_name }}/pyproject.toml

@@ -9,15 +9,15 @@ urls = { Repository = "https://github.com/robert-koch-institut/mex-{{ cookiecutt
 requires-python = "<3.13,>=3.11"
 dependencies = []
 optional-dependencies.dev = [
-    "black>=24.3.0",
-    "ipdb>=0.13.13",
-    "mypy>=1.9.0",
-    "pytest-cov>=4.1.0",
-    "pytest-random-order>=1.1.1",
-    "pytest-xdist>=3.5.0",
-    "pytest>=8.1.1",
-    "ruff>=0.3.5",
-    "sphinx>=7.2.6",
+    "black==24.3.0",
+    "ipdb==0.13.13",
+    "mypy==1.9.0",
+    "pytest-cov==4.1.0",
+    "pytest-random-order==1.1.1",
+    "pytest-xdist==3.5.0",
+    "pytest==8.1.1",
+    "ruff==0.3.5",
+    "sphinx==7.2.6",
 ]
 
 [project.scripts]
@@ -127,5 +127,5 @@ known-first-party = ["mex", "tests"]
 convention = "google"
 
 [build-system]
-requires = ["pdm-backend>=2.1.8"]
+requires = ["pdm-backend==2.1.8"]
 build-backend = "pdm.backend"

mex-{{ cookiecutter.project_name }}/renovate.json

@@ -0,0 +1,30 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "enabledManagers": [
+        "github-actions",
+        "html",
+        "npm",
+        "pep621",
+        "pip_requirements"
+    ],
+    "gitAuthor": "RKIMetadataExchange <[email protected]>",
+    "lockFileMaintenance": {
+        "enabled": true,
+        "schedule": [
+            "before 4am on monday"
+        ]
+    },
+    "packageRules": [
+        {
+            "matchUpdateTypes": [
+                "digest",
+                "lockFileMaintenance",
+                "major",
+                "minor",
+                "patch",
+                "pin"
+            ],
+            "minimumReleaseAge": "7 days"
+        }
+    ]
+}