CI: Move to Rennovate

[gmuloc]

Moving from dependabot to rennovate to update dependencies.

Summary by CodeRabbit

• Chores
  • Replaced Dependabot configuration with Renovate for automated dependency updates.
  • Added scheduled update checks for Python packages, GitHub Actions, Rust crates, and the Rust toolchain.
  • Standardized dependency update commit types and message prefixes.

[github-actions]

This pull request has conflicts, please resolve those before we can evaluate the pull request.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 96314066-6064-43f5-8d33-31625237afe5

📥 Commits

Reviewing files that changed from the base of the PR and between 1bb9575 and 0ffd120.

📒 Files selected for processing (1)

• renovate.json

---

📝 Walkthrough

Walkthrough

Dependabot configuration is removed and replaced with Renovate configuration. Renovate uses a weekly UTC schedule and manager-specific rules for Python, GitHub Actions, Rust crates, and the Rust toolchain.

Changes

Dependency update tooling

Layer / File(s)	Summary
Renovate update configuration renovate.json, .github/dependabot.yml	Adds recommended Renovate settings, a weekly UTC update schedule, and package rules with standardized semantic commit types and prefixes while removing the existing Dependabot configuration.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested reviewers: clausholbecharista

Poem

I’m a rabbit with updates to arrange,
Renovate hops in for a change.
Rust and Python, Actions too,
Weekly carrots queued for you.
Dependabot rests beneath the moon.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description is too brief and omits the required template sections and checklist items.	Add Change Summary, Related Issue(s), Component(s) name, Proposed changes, How to test, and the checklist items.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title matches the main change by indicating a CI dependency-update migration to Renovate, despite the typo.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 Checkov (3.3.8)

renovate.json

Traceback (most recent call last):
File "/usr/local/bin/checkov", line 2, in
from checkov.main import Checkov
ModuleNotFoundError: No module named 'checkov'

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Conflicts have been resolved. A maintainer will review the pull request shortly.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.99%. Comparing base (baf7660) to head (0ffd120).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #137   +/-   ##
=======================================
  Coverage   88.99%   88.99%           
=======================================
  Files          80       80           
  Lines       15938    15938           
=======================================
  Hits        14184    14184           
  Misses       1754     1754           

Components	Coverage Δ
Python	100.00% <ø> (ø)
Rust	88.99% <ø> (ø)

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@renovate.json`:
- Around line 51-61: Update the Renovate rule identified by the “Maintain the
pinned Rust toolchain” description so it excludes the rust-toolchain manager
instead of applying rangeStrategy pinning. Remove this rule or disable it with
the existing Renovate configuration mechanism, ensuring Renovate no longer
creates Rust toolchain update PRs.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: afcf50af-6bd6-4df5-bcea-bf0112bf04c1

📥 Commits

Reviewing files that changed from the base of the PR and between baf7660 and 1bb9575.

📒 Files selected for processing (2)

• .github/dependabot.yml
• renovate.json

💤 Files with no reviewable changes (1)

• .github/dependabot.yml