From e23272fedd8f12256e06a03496471d78231ea688 Mon Sep 17 00:00:00 2001
From: Weston Blieden <mblieden@gmail.com>
Date: Thu, 17 Sep 2026 08:38:24 +0200
Subject: [PATCH] ci: adopt Renovate for dependency updates

---
 .github/dependabot.yml | 17 -----------------
 renovate.json          | 20 ++++++++++++++++++++
 2 files changed, 20 insertions(+), 17 deletions(-)
 delete mode 100644 .github/dependabot.yml
 create mode 100644 renovate.json

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index 070ad76..0000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,17 +0,0 @@
----
-version: 2
-updates:
-  - package-ecosystem: github-actions
-    directory: /
-    schedule:
-      interval: monthly
-    # One PR per repo instead of one per action; the workflow is generated from
-    # Axis_Cam_Template/ci/build.yml.tmpl, so apply bumps there and re-sync.
-    groups:
-      github-actions:
-        patterns:
-          - "*"
-    commit-message:
-      prefix: ci
-    labels:
-      - dependencies
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..4d59a4d
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,20 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:recommended"],
+  "dependencyDashboard": true,
+  "ignorePaths": [
+    ".github/workflows/build.yml"
+  ],
+  "prConcurrentLimit": 3,
+  "prHourlyLimit": 0,
+  "schedule": ["before 5am on Monday"],
+  "packageRules": [
+    {
+      "description": "Keep routine Go transitive dependency maintenance together.",
+      "matchManagers": ["gomod"],
+      "matchDepTypes": ["indirect"],
+      "groupName": "Go indirect dependencies",
+      "groupSlug": "go-indirect-dependencies"
+    }
+  ]
+}