Standardize Renovate configuration

[antunflas]

Summary

Adopt the shared Renovate setup used across Infinum Android repos:

• renovate.json extends the central infinum/android-renovate-config preset (no per-repo rules to maintain).
• .github/workflows/renovate.yml runs Renovate on a schedule, authenticated with the Renovate GitHub App (not a PAT or the default GITHUB_TOKEN).
• Hardened: permissions: {} zeroes the default token, the Renovate action is pinned to a full commit SHA, and RENOVATE_REPOSITORIES scopes the run to this repo only.

Prerequisites

The workflow requires, on this repo / org:

• Variable RENOVATE_APP_ID
• Secret RENOVATE_APP_PRIVATE_KEY
• The Renovate GitHub App installed on this repo and on android-renovate-config (private preset repo).

Testing

• Trigger the workflow manually via Actions → Renovate → Run workflow (workflow_dispatch) and confirm the App token step succeeds and Renovate opens its onboarding/dependency PRs.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

Adds Renovate automation using Infinum’s shared Android Renovate preset, with a GitHub Actions workflow that runs Renovate on a schedule or manually using a GitHub App token.

Changes:

• Adds renovate.json extending infinum/android-renovate-config.
• Adds a scheduled/manual Renovate workflow using a scoped GitHub App token.
• Restricts Renovate execution to this repository via RENOVATE_REPOSITORIES.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
renovate.json	Defines Renovate configuration and reviewer assignment.
.github/workflows/renovate.yml	Adds the GitHub Actions workflow that authenticates and runs Renovate.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.