From 8a570c1e95bedba354fc03e176d59e4cd434f1e8 Mon Sep 17 00:00:00 2001
From: Abdelkarim Mateos Sanchez <abdelkarim.mateos@castris.com>
Date: Mon, 11 May 2026 10:11:09 +0200
Subject: [PATCH] chore(deps): adopt canonical Renovate config and retire
 Dependabot (STD-002)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Apply the canonical library-package Renovate block defined in umbrella
STANDARDS.md §STD-002 and complete the migration to the self-hosted
Renovate bot (renovate.tabratino.com, decided 2026-05-02).

- Add renovate.json with canonical preset (config:recommended,
  :dependencyDashboard, :timezone(Europe/Madrid), :semanticCommits,
  schedule "before 10am on monday")
- Remove .github/dependabot.yml
- Remove .github/workflows/dependabot-auto-merge.yml

Pattern validated byte-identical against larabill (PR #26, merged
2026-05-11). Existing Renovate onboarding PR will be closed after this
merges (repo will be already configured, no onboarding needed).

Refs: AichaDigital umbrella STANDARDS.md §STD-002

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .github/dependabot.yml                      | 19 ------------
 .github/workflows/dependabot-auto-merge.yml | 33 ---------------------
 renovate.json                               | 10 +++++++
 3 files changed, 10 insertions(+), 52 deletions(-)
 delete mode 100644 .github/dependabot.yml
 delete mode 100644 .github/workflows/dependabot-auto-merge.yml
 create mode 100644 renovate.json

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index 39b1580..0000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,19 +0,0 @@
-# Please see the documentation for all configuration options:
-# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-
-version: 2
-updates:
-
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-    labels:
-      - "dependencies"
-
-  - package-ecosystem: "composer"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-    labels:
-      - "dependencies"
diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
deleted file mode 100644
index 4b8f6ae..0000000
--- a/.github/workflows/dependabot-auto-merge.yml
+++ /dev/null
@@ -1,33 +0,0 @@
-name: dependabot-auto-merge
-on: pull_request_target
-
-permissions:
-  pull-requests: write
-  contents: write
-
-jobs:
-  dependabot:
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    if: ${{ github.actor == 'dependabot[bot]' }}
-    steps:
-
-      - name: Dependabot metadata
-        id: metadata
-        uses: dependabot/fetch-metadata@v3.1.0
-        with:
-          github-token: "${{ secrets.GITHUB_TOKEN }}"
-
-      - name: Auto-merge Dependabot PRs for semver-minor updates
-        if: ${{steps.metadata.outputs.update-type == 'version-update:semver-minor'}}
-        run: gh pr merge --auto --squash "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
-
-      - name: Auto-merge Dependabot PRs for semver-patch updates
-        if: ${{steps.metadata.outputs.update-type == 'version-update:semver-patch'}}
-        run: gh pr merge --auto --squash "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..beba507
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,10 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended",
+    ":dependencyDashboard",
+    ":timezone(Europe/Madrid)",
+    ":semanticCommits"
+  ],
+  "schedule": ["before 10am on monday"]
+}