Merge pull request #1050 from onekey-sec/renovate

Renovate integration

Author: vlaci

.github/workflows/update-nix.yml

@@ -54,3 +54,9 @@ repos:
         name: Check Github actions
       - id: check-github-workflows
         name: Check Github workflows
+
+  - repo: https://github.com/renovatebot/pre-commit-hooks
+    rev: 39.92.0
+    hooks:
+      - id: renovate-config-validator
+        args: [--strict]

.github/workflows/update-vendored-nix-dependencies.py

@@ -22,6 +22,7 @@
     with pkgs;
     [
       nvfetcher
+      nodejs # for pyright and renovate
     ]
     ++ unblob.runtimeDeps;
 

.pre-commit-config.yaml

@@ -0,0 +1,33 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:recommended"],
+  "packageRules": [
+    {
+      "matchUpdateTypes": ["minor", "patch"],
+      "autoApprove": true,
+      "automerge": true
+    }
+  ],
+  "nix": {
+    "enabled": true,
+    "description": "opt-in support for nix https://docs.renovatebot.com/modules/manager/nix/#enabling",
+    "lockFileMaintenance": {
+      "enabled": true,
+      "branchTopic": "update-flake-lock",
+      "commitMessageAction": "Update flake.lock",
+      "extends": ["schedule:earlyMondays"]
+    }
+  },
+  "poetry": {
+    "lockFileMaintenance": {
+      "enabled": true,
+      "branchTopic": "update-poetry-lock",
+      "commitMessageAction": "Update poetry.lock",
+      "extends": ["schedule:monthly"]
+    }
+  },
+  "pre-commit": {
+    "enabled": true,
+    "description": "opt-in support for pre-commit  https://docs.renovatebot.com/modules/manager/nix/#enabling"
+  }
+}