Summary

This PR introduces automated dependency management using Renovate Bot. It adds configuration and a GitHub Actions workflow to automatically check for and create pull requests for dependency updates on a scheduled basis.

Changes

• .github/renovate.json: Added Renovate configuration with the following settings:

  • Scheduled to run before 6am on Mondays
  • Enabled for minor version updates only (major and patch updates disabled)
  • Separate PRs for major, minor, and patch versions
  • Lock file maintenance enabled on the same schedule
  • Configured for Python package managers (pip_requirements and pep621)
  • Limited to 5 concurrent PRs with immediate creation
  • Labeled with dependencies and minor-update tags

• .github/workflows/dependency-updates.yml: Added GitHub Actions workflow that:

  • Runs Renovate Bot on a weekly schedule (Mondays at 5:00 AM UTC)
  • Can be manually triggered via workflow_dispatch
  • Uses Renovate Bot v40.3.10 with the configuration file specified above
  • Has appropriate permissions for creating PRs and modifying repository contents

Implementation Details

• Only minor version updates will trigger automatic PRs (major and patch updates are disabled)
• PRs are not auto-merged, allowing for manual review before merging
• The workflow respects the configured schedule to avoid update fatigue
• Python-specific package managers are explicitly targeted for updates

https://claude.ai/code/session_015GTK7EfesBjjkndpEFX6Pz