build: create renovate configuration

pom.xml

@@ -7,7 +7,7 @@
 
 	<groupId>fr.insee.pearljam</groupId>
 	<artifactId>pearljam-back-office</artifactId>
-	<version>5.1.0</version>
+	<version>5.1.1</version>
 	<name>Pearl-Jam-Back-Office</name>
 	<description>Back-office services for PearlJam</description>
 

renovate.json

@@ -0,0 +1,44 @@
+{
+  "extends": ["config:best-practices", ":semanticCommits", ":disableRateLimiting"],
+  "baseBranches": ["develop", "main"],
+  "packageRules": [
+    {
+      "enabled": false,
+      "matchPackagePatterns": ["*"],
+      "matchBaseBranches": ["main"]
+    },
+    {
+      "matchPackagePatterns": ["*"],
+      "matchBaseBranches": ["develop"],
+      "labels": ["dependencies"],
+      "bumpVersion": "patch",
+      "dependencyDashboardApproval": true
+    },
+    {
+      "groupName": "spring",
+      "groupSlug": "spring",
+      "matchPackagePatterns": ["org.springframework.*"],
+      "matchBaseBranches": ["develop"],
+      "bumpVersion": "minor",
+      "dependencyDashboardApproval": true
+    },
+    {
+      "groupName": "all minor dependencies",
+      "groupSlug": "all-minor-patch",
+      "matchPackagePatterns": ["*"],
+      "matchBaseBranches": ["develop"],
+      "matchUpdateTypes": ["minor", "patch"],
+      "bumpVersion": "patch",
+      "dependencyDashboardApproval": false
+    }
+  ],
+  "vulnerabilityAlerts": {
+    "enabled": true,
+    "baseBranches": ["main"],
+    "addLabels": ["security"],
+    "bumpVersion": "patch",
+    "schedule": ["before 5:00am"]
+  },
+  "schedule": ["every weekend"],
+  "timezone": "Europe/Paris"
+}