ci: switch from dependabot to renovate

.github/workflows/pr_title.yml

@@ -35,10 +35,14 @@ jobs:
       - run: npm install @commitlint/config-conventional
       - run: >
           echo 'module.exports = {
-            // Workaround for https://github.com/dependabot/dependabot-core/issues/5923
+            // Bot PR descriptions are not conventional-commit bodies, so do not lint them.
             "ignores": [
+              // Dependabot, see https://github.com/dependabot/dependabot-core/issues/5923.
+              // Kept while dependabot PRs opened before the switch to renovate are still open.
               (message) => /^Bumps \[.+]\(.+\) from .+ to .+\.$/m.test(message),
-              (message) => /^Updates the requirements on .+ to permit the latest version\.$/m.test(message)
+              (message) => /^Updates the requirements on .+ to permit the latest version\.$/m.test(message),
+              // Renovate
+              (message) => /^This PR contains the following updates:$/m.test(message)
             ],
             "rules": {
               "body-max-line-length": [0, "always", Infinity],

renovate.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended",
+    ":semanticCommitTypeAll(chore)",
+    ":maintainLockFilesWeekly"
+  ],
+  "semanticCommits": "enabled",
+  "semanticCommitType": "chore",
+  "semanticCommitScope": "deps",
+  "packageRules": [
+    {
+      "description": "Port of the dependabot substrait group. check_substrait_package_versions.sh requires all three packages to carry the same version, so they have to move together",
+      "matchPackageNames": [
+        "substrait-protobuf",
+        "substrait-antlr",
+        "substrait-extensions"
+      ],
+      "groupName": "substrait packages"
+    },
+    {
+      "description": "Match the deps-dev scope dependabot used for development dependencies",
+      "matchDepTypes": ["dependency-groups", "project.optional-dependencies"],
+      "semanticCommitScope": "deps-dev"
+    },
+    {
+      "description": "Changing the supported Python version is a project decision, not a routine bump",
+      "matchPackageNames": ["python"],
+      "enabled": false
+    }
+  ]
+}