From fa34f0e530de6235cec186741531607b5419d755 Mon Sep 17 00:00:00 2001
From: DevCats <chris@dualriver.com>
Date: Mon, 15 Jun 2026 15:26:14 +0000
Subject: [PATCH] ci: switch dependency updates from Dependabot to Renovate

Dependabot's npm ecosystem updates package.json but cannot regenerate
bun.lock, which made every Dependabot npm PR fail with 'lockfile had
changes, but lockfile is frozen' when CI ran bun install
--frozen-lockfile. PR #11 (awesome-lint 0.18.6 -> 2.3.0) was the
most recent example.

Renovate's bun manager natively understands package.json and bun.lock
together. It will regenerate the lockfile in the same PR that bumps
the dep, so --frozen-lockfile keeps working.

This change:
- Replaces .github/dependabot.yaml with .github/renovate.json.
- Keeps weekly cadence (Monday morning, America/Chicago timezone) to
  match the original Dependabot schedule.
- Groups updates by manager so github-actions and bun dependency
  bumps each arrive as one PR.
- Sets commit-message prefixes ('ci:' for github-actions, 'chore(deps):'
  for bun) so the merge history stays readable.

Follow-up after this PR merges: install the Mend Renovate GitHub App
on coder/awesome-coder (or use a self-hosted Renovate workflow) so
Renovate starts processing the new config. The app reads
.github/renovate.json automatically.

This change was prepared by Coder Agents.
---
 .github/dependabot.yaml | 19 -------------------
 .github/renovate.json   | 18 ++++++++++++++++++
 2 files changed, 18 insertions(+), 19 deletions(-)
 delete mode 100644 .github/dependabot.yaml
 create mode 100644 .github/renovate.json

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
deleted file mode 100644
index e557ad2..0000000
--- a/.github/dependabot.yaml
+++ /dev/null
@@ -1,19 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-    groups:
-      github-actions:
-        patterns:
-          - "*"
-
-  - package-ecosystem: "npm"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-    groups:
-      npm:
-        patterns:
-          - "*"
diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 0000000..d349690
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,18 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:recommended"],
+  "timezone": "America/Chicago",
+  "schedule": ["before 06:00 on monday"],
+  "packageRules": [
+    {
+      "matchManagers": ["github-actions"],
+      "groupName": "github-actions",
+      "commitMessagePrefix": "ci:"
+    },
+    {
+      "matchManagers": ["bun"],
+      "groupName": "bun dependencies",
+      "commitMessagePrefix": "chore(deps):"
+    }
+  ]
+}