Standardize Renovate configuration

[antunflas]

Summary

Adopt the shared Renovate setup used across Infinum Android repos:

• renovate.json extends the central infinum/android-renovate-config preset (no per-repo rules to maintain).
• .github/workflows/renovate.yml runs Renovate on a schedule, authenticated with the Renovate GitHub App (not a PAT or the default GITHUB_TOKEN).
• Hardened: permissions: {} zeroes the default token, the Renovate action is pinned to a full commit SHA, and RENOVATE_REPOSITORIES scopes the run to this repo only.

Prerequisites

The workflow requires, on this repo / org:

• Variable RENOVATE_APP_ID
• Secret RENOVATE_APP_PRIVATE_KEY
• The Renovate GitHub App installed on this repo and on android-renovate-config (private preset repo).

Testing

• Trigger the workflow manually via Actions → Renovate → Run workflow (workflow_dispatch) and confirm the App token step succeeds and Renovate opens its onboarding/dependency PRs.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

This PR introduces Renovate automation using the shared Infinum Android Renovate preset and a scheduled GitHub Actions workflow authenticated via a GitHub App.

Changes:

• Adds root Renovate configuration extending infinum/android-renovate-config.
• Adds a Renovate workflow with manual and twice-monthly scheduled triggers.
• Uses GitHub App authentication and scopes Renovate execution to this repository.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
renovate.json	Configures Renovate to extend the shared Android preset and assign a reviewer.
.github/workflows/renovate.yml	Adds the scheduled/manual Renovate workflow using GitHub App token authentication.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.