Configure Renovate (#2493)

* Add renovate.json

* Update renovate.json

* Update renovate.json

* Enable git-submodules

* Remove Dependabot

* Update renovate.json

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: ylemkimon <y@ylem.kim>

.github/dependabot.yml

@@ -3,20 +3,6 @@
 
 version: 2
 updates:
-  - package-ecosystem: "npm"
-    directory: "/" # Location of package manifests
-    schedule:
-      interval: "daily"
-  - package-ecosystem: "npm"
-    directory: "/website/"
-    schedule:
-      interval: "daily"
-
-  - package-ecosystem: "gitsubmodule"
-    directory: "/" # Location of .gitmodules
-    schedule:
-      interval: "daily"
-
   - package-ecosystem: "github-actions"
     directory: "/" # Location of .github
     schedule:

.github/workflows/dependabot.yml

@@ -1,47 +0,0 @@
-name: Dependabot
-
-on:
-  push:
-    branches: [ dependabot/npm_and_yarn/** ]
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-
-    steps:
-    - uses: actions/checkout@v2
-      with:
-        fetch-depth: 2
-    - name: Use Node.js 12.x
-      uses: actions/setup-node@v1
-      with:
-        node-version: '12'
-    - name: Autofix lockfile
-      run: |
-        # change directory
-        cd .`git log -1 --pretty=%s | awk '{ print $9 }'`
-
-        # restore yarn.lock from the previous commit
-        git checkout HEAD^ -- yarn.lock
-
-        # install yarn-plugin-deduplicate
-        yarn plugin import https://raw.githubusercontent.com/eps1lon/yarn-plugin-deduplicate/latest/bin/%40yarnpkg/plugin-deduplicate.js
-
-        # if package.json was not updated, upgrade the dependency
-        git diff --name-only HEAD^ HEAD | grep -q 'package.json' || yarn up `git log -1 --pretty=%s | awk '{ print $3 }'`
-
-        # restore package.json from the last commit
-        git checkout HEAD -- package.json
-
-        yarn install
-
-        # deduplicate lockfile
-        yarn deduplicate
-    - name: Commit changes
-      run: |
-        cd .`git log -1 --pretty=%s | awk '{ print $9 }'`
-        git add yarn.lock
-        git config --global user.name 'dependabot[bot]'
-        git config --global user.email '49699333+dependabot[bot]@users.noreply.github.com'
-        git commit -m "Dependabot autofix [skip netlify]"
-        git push

README.md

@@ -3,7 +3,6 @@
 [![CI](https://github.com/KaTeX/KaTeX/workflows/CI/badge.svg?branch=master&event=push)](https://github.com/KaTeX/KaTeX/actions?query=workflow%3ACI)
 [![codecov](https://codecov.io/gh/KaTeX/KaTeX/branch/master/graph/badge.svg)](https://codecov.io/gh/KaTeX/KaTeX)
 [![Discussions](https://img.shields.io/badge/Discussions-join-brightgreen)](https://github.com/KaTeX/KaTeX/discussions)
-[![Dependabot Status](https://api.dependabot.com/badges/status?host=github&repo=KaTeX/KaTeX)](https://dependabot.com)
 [![jsDelivr](https://data.jsdelivr.com/v1/package/npm/katex/badge?style=rounded)](https://www.jsdelivr.com/package/npm/katex)
 ![katex.min.js size](https://img.badgesize.io/https://unpkg.com/katex/dist/katex.min.js?compression=gzip)
 [![Gitpod ready-to-code](https://img.shields.io/badge/Gitpod-ready--to--code-blue?logo=gitpod)](https://gitpod.io/#https://github.com/KaTeX/KaTeX)

renovate.json

@@ -0,0 +1,28 @@
+{
+  "extends": [
+    "config:base",
+    ":dependencyDashboard",
+    ":automergeMinor",
+    ":prNotPending",
+    "group:linters"
+  ],
+  "git-submodules": {
+    "enabled": true,
+    "automerge": false
+  },
+  "lockFileMaintenance": {
+    "enabled": true,
+    "schedule": ["at any time"],
+    "stabilityDays": 0,
+    "dependencyDashboardApproval": true
+  },
+  "includePaths": [
+    "package.json",
+    "website/package.json",
+    ".gitmodules"
+  ],
+  "stabilityDays": 3,
+  "rangeStrategy": "update-lockfile",
+  "commitBody": "[skip netlify]",
+  "postUpdateOptions": ["yarnDedupeHighest"]
+}