Migrating away from dependabot in favor of renovate

CODEOWNERS

@@ -1,4 +1,31 @@
+# Default owners for files without a more specific rule.
 * @akfreas @phobetron @Lotfi-Arif
 
-# github actions
+# GitHub repository automation and policy.
 .github/**/* @phobetron @Lp-Francois @Lotfi-Arif
+
+# Code ownership policy.
+/CODEOWNERS @phobetron @Lp-Francois
+
+# Dependency management and update automation.
+/package.json @phobetron @Lp-Francois
+/pnpm-lock.yaml @phobetron @Lp-Francois
+/pnpm-workspace.yaml @phobetron @Lp-Francois
+/renovate.json @phobetron @Lp-Francois
+
+# Node and package-manager runtime configuration.
+/.nvmrc @phobetron @Lp-Francois
+/.pnpmfile.cjs @phobetron @Lp-Francois
+
+# Commit workflow and repository hygiene.
+/.czrc @phobetron @Lp-Francois
+/.czvinylrc.yaml @phobetron @Lp-Francois
+/.gitignore @phobetron @Lp-Francois
+/.lintstagedrc.yaml @phobetron @Lp-Francois
+/.husky/** @phobetron @Lp-Francois
+
+# Documentation generation.
+/typedoc.json @phobetron @Lp-Francois
+
+# Contentful operational configuration.
+/.contentful/** @phobetron @Lp-Francois

renovate.json

@@ -1,4 +1,42 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["local>contentful/renovate-config"]
+  "extends": ["local>contentful/renovate-config"],
+  "enabledManagers": ["github-actions", "npm", "gradle", "bundler"],
+  "includePaths": [
+    ".github/workflows/**",
+    "package.json",
+    "pnpm-lock.yaml",
+    "pnpm-workspace.yaml",
+    "implementations/node-sdk/**",
+    "implementations/node-sdk+web-sdk/**",
+    "implementations/web-sdk/**",
+    "implementations/web-sdk_react/**",
+    "implementations/react-web-sdk/**",
+    "implementations/react-native-sdk/**",
+    "packages/react-native-sdk/dev/**"
+  ],
+  "prConcurrentLimit": 5,
+  "timezone": "Europe/Berlin",
+  "packageRules": [
+    {
+      "description": "Run GitHub Actions dependency updates during the Monday morning maintenance window.",
+      "matchManagers": ["github-actions"],
+      "schedule": ["* 8-11 * * 1"]
+    },
+    {
+      "description": "Run npm and pnpm dependency updates during the Tuesday morning maintenance window.",
+      "matchManagers": ["npm"],
+      "schedule": ["* 8-11 * * 2"]
+    },
+    {
+      "description": "Run Gradle dependency updates during the first-Monday morning maintenance window.",
+      "matchManagers": ["gradle"],
+      "schedule": ["* 9-12 1-7 * 1"]
+    },
+    {
+      "description": "Run Bundler dependency updates during the first-Monday late-morning maintenance window.",
+      "matchManagers": ["bundler"],
+      "schedule": ["* 10-13 1-7 * 1"]
+    }
+  ]
 }