Use renovate to do the missing updates

.github/dependabot.yaml

@@ -5,26 +5,26 @@ updates:
   - package-ecosystem: gradle
     directory: '/'
     schedule:
-      interval: daily
+      interval: monthly
     ignore:
       - dependency-name: none
 
   - package-ecosystem: pip
     directory: '/ci'
     schedule:
-      interval: daily
+      interval: monthly
     ignore:
       - dependency-name: none
 
   - package-ecosystem: docker
     directory: '/'
     schedule:
-      interval: daily
+      interval: monthly
     ignore:
       - dependency-name: none
   - package-ecosystem: docker
     directory: '/core'
     schedule:
-      interval: daily
+      interval: monthly
     ignore:
       - dependency-name: none

.github/renovate.json5

@@ -0,0 +1,33 @@
+{
+  extends: ['config:base', 'schedule:earlyMondays'],
+  baseBranches: ['master', '3.20', '3.27', '3.28', '3.29'],
+  packageRules: [
+    /** Automerge the patch, the minor and the dev dependency */
+    {
+      matchBaseBranches: ['master'],
+      matchUpdateTypes: ['minor', 'patch'],
+      automerge: true,
+    },
+    {
+      matchDepTypes: ['devDependencies'],
+      automerge: true,
+    },
+    /** Group the patch and the minor */
+    {
+      matchUpdateTypes: ['patch'],
+      groupName: 'all patch versions',
+      automerge: true,
+    },
+    {
+      matchUpdateTypes: ['minor'],
+      groupName: 'all minor versions',
+      automerge: true,
+    },
+    /** Accept only the patch on the stabilization branches */
+    {
+      branchPrefix: ['3.'],
+      matchUpdateTypes: ['major', 'minor', 'pin', 'digest', 'lockFileMaintenance', 'rollback', 'bump'],
+      enabled: false,
+    },
+  ],
+}

.github/workflows/dependabot-auto-merge.yaml

@@ -1,21 +1,17 @@
----
-name: Auto merge Dependabot updates
+name: Auto reviews updates
 
-on:
-  workflow_run:
-    workflows:
-      - Continuous integration
-    types:
-      - completed
+on: pull_request
 
 jobs:
   auto-merge:
-    name: Auto merge Dependabot updates
+    name: Auto reviews updates
     runs-on: ubuntu-20.04
     timeout-minutes: 5
 
     steps:
-      - name: Auto merge
-        uses: ridedott/dependabot-auto-merge-action@master
+      - name: Auto reviews updates
+        uses: golfzaptw/action-auto-reviews-from-branches@master
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          BRANCHES: master
+          AUTHOR: dependabot[bot],renovatebot