proper dependabot support

.github/dependabot.yml

@@ -0,0 +1,17 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "pip" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "weekly"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      # Check for updates to GitHub Actions every week
+      interval: "weekly"

.github/renovate.json

@@ -13,7 +13,7 @@
   "pre-commit": {
     "enabled": true,
     "schedule": [
-      "on the first day of the month before 6am"
+      "on the first day of the month before 1am"
     ],
     "packageRules": [
       {

template/.github/renovate.json

@@ -4,13 +4,30 @@
     "config:recommended"
   ],
   "automerge": true,
-  "ignorePaths": [
-    "**/.python-version"
-  ],
   "lockFileMaintenance": {
-    "enabled": true
+    "enabled": true,
+    "schedule": [
+      "on friday before 3pm"
+    ]
   },
   "pre-commit": {
-    "enabled": true
-  }
+    "enabled": true,
+    "schedule": [
+      "on the first day of the month before 1am"
+    ],
+    "packageRules": [
+      {
+        "groupName": "pre-commit hooks",
+        "groupSlug": "pre-commit",
+        "labels": [
+          "pre-commit",
+          "dependencies"
+        ],
+        "matchDepTypes": ["repository"]
+      }
+    ]
+  },
+  "labels": [
+    "renovate"
+  ]
 }