Dependabot/Renovate integration

[kernelb00t]

Description

With growing services, having those configured on the repo would help keep track of updates (especially patches that could contain security fixes). Maybe autofix is too dangerous, but at least getting notifications about updates would be great.

Solution you'd like

• Integration of Dependabot (for GHActions and misc tooling; done through the repo's settings)
• Integration of Renovate (subcharts, docker images, etc...; activated with maintainer's account with mend.io dashboard and set up by renovate.json file)

Code of Conduct

• I agree to follow this project's Code of Conduct

[imgios]

Hi @kernelb00t, thanks for your suggestion. I will take a look into this, do you already have any implementation idea? Do you want to take it or leave it to us?

[kernelb00t]

Go for Renovate! I don't think that I am able to do this, because you have to import the bot to the repo. But you can see https://github.com/kernelb00t/titicloud, I've done the config file and I also vibecoded a regex that allows you to help it find docker images or GitHub releases and update them automatically. The advantage with GitHub releases is you have the changelog, so you can check for breaking changes faster.

[imgios]

Then we need @fonzdm for that one.