[I] Switch dependency update automation from Dependabot to Renovate [texera]

["Yicong-Huang (via GitHub)" <gi...@apache.org>]

Yicong-Huang opened a new issue, #6847:
URL: https://github.com/apache/texera/issues/6847

   ### Task Summary
   
   Switch dependency update automation from Dependabot to Renovate (Mend "Forking Renovate" app), following other ASF projects (Polaris, Fineract, JMeter, Solr). Motivations, in order:
   
   1. PRs come from the bot's fork instead of branches in this repo.
   2. Security-fix PRs can natively use a `fix(...)` conventional-commit prefix while routine bumps use `chore(...)` — impossible with Dependabot's per-ecosystem `commit-message.prefix`.
   3. More flexible grouping (patch-level bumps grouped per area, security fixes kept as individual PRs).
   4. Mature sbt support vs. Dependabot's beta.
   
   Plan: add `.github/renovate.json5` translating the current `dependabot.yml` semantics (weekly schedule, per-area patch groups, Angular-major exemption, per-area commit scopes), remove `dependabot.yml`, and ask INFRA to enable the Forking Renovate app for this repo.
   
   ### Task Type
   
   - [ ] Refactor / Cleanup
   - [X] DevOps / Deployment / CI
   - [ ] Testing / QA
   - [ ] Documentation
   - [ ] Performance
   - [ ] Other
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] Switch dependency update automation from Dependabot to Renovate [texera]

["github-actions[bot] (via GitHub)" <gi...@apache.org>]

github-actions[bot] commented on issue #6847:
URL: https://github.com/apache/texera/issues/6847#issuecomment-5064408806

   <!-- texera:template-compliance -->
   👋 Thanks for opening this issue, @Yicong-Huang!
   
   It looks like the issue description doesn't quite follow our template yet:
   
   - This issue doesn't appear to use one of our templates (Bug, Feature, or Task). Please open it using a template so the required details are captured.
   
   Filling out the template helps reviewers understand and triage your contribution faster. Please edit the description to complete it. This message will disappear automatically once the template is followed.
   
   You can find the template prompts by editing the description, or see [CONTRIBUTING.md](https://github.com/apache/texera/blob/main/CONTRIBUTING.md) for the full contribution flow.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] Switch dependency update automation from Dependabot to Renovate [texera]

["Yicong-Huang (via GitHub)" <gi...@apache.org>]

Yicong-Huang closed issue #6847: Switch dependency update automation from Dependabot to Renovate
URL: https://github.com/apache/texera/issues/6847


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org