feat: additional renovatebot configurations

[nitrocode]

what

• feat: additional renovatebot configurations

why

• autoclose if no dependencies using dependencydashboardautoclose
• set pr hourly limit to 1 using prhourlylimit to avoid e2e failures
• manage yarn dependency updates using lockfilemaintenance
  • current issue dashboard doesn't autodetect the yarn.lock yet
• enable vulnerability alerts using vulnerabilityalerts
• remove prConcurrentLimit since it defaults to 10 and we never hit it
• add a suffix to include the packageFile using the commitMessageSuffix
  • This will add the package file name to the commit and the PR title

tests

• I have tested my changes by running renovate-config-validator

docker run \
  -v $(pwd)/.github/renovate.json5:/usr/src/app/renovate.json5 \
  --env LOG_LEVEL=debug \
  --rm -it \
  renovate/renovate renovate-config-validator

returns the same thing as the gh pr check

INFO: Config validated successfully

references

• configs
  • https://docs.renovatebot.com/configuration-options/#dependencydashboardautoclose
  • https://docs.renovatebot.com/configuration-options/#prhourlylimit
  • https://docs.renovatebot.com/configuration-options/#lockfilemaintenance
  • https://docs.renovatebot.com/configuration-options/#vulnerabilityalerts
  • https://docs.renovatebot.com/configuration-options/#prConcurrentLimit
  • https://docs.renovatebot.com/configuration-options/#commitmessagesuffix
  • https://docs.renovatebot.com/templates/#other-available-fields
• blogs
  • https://www.augmentedmind.de/2021/07/25/renovate-bot-cheat-sheet/
• Dependency Dashboard #2818

[krrrr38]

roger