Use renovate to do the missing updates

.github/dependabot.yaml

@@ -5,26 +5,26 @@ updates:
   - package-ecosystem: gradle
     directory: '/'
     schedule:
-      interval: daily
+      interval: monthly
     ignore:
       - dependency-name: none
 
   - package-ecosystem: pip
     directory: '/ci'
     schedule:
-      interval: daily
+      interval: monthly
     ignore:
       - dependency-name: none
 
   - package-ecosystem: docker
     directory: '/'
     schedule:
-      interval: daily
+      interval: monthly
     ignore:
       - dependency-name: none
   - package-ecosystem: docker
     directory: '/core'
     schedule:
-      interval: daily
+      interval: monthly
     ignore:
       - dependency-name: none

.github/renovate.json5

@@ -0,0 +1,33 @@
+{
+  "extends": ["config:base", "schedule:earlyMondays"],
+  "baseBranches": ["master", "3.20", "3.27", "3.28", "3.29"],
+  "packageRules": [
+    /** Automerge the patch, the minor and the dev dependency */
+    {
+      "matchBaseBranches": ["master"],
+      "matchUpdateTypes": ["minor", "patch"],
+      "automerge": true
+    },
+    {
+      "matchDepTypes": ["devDependencies"],
+      "automerge": true
+    },
+    /** Group the patch and the minor */
+    {
+      "matchUpdateTypes": ["patch"],
+      "groupName": "all patch versions",
+      "automerge": true
+    },
+    {
+      "matchUpdateTypes": ["minor"],
+      "groupName": "all minor versions",
+      "automerge": true
+    },
+    /** Accept only the patch on the stabilization branches */
+    {
+      "branchPrefix": ["3."],
+      "matchUpdateTypes": ["major", "minor", "pin", "digest", "lockFileMaintenance", "rollback", "bump"],
+      "enabled": false
+    }
+  ]
+}

.github/workflows/dependabot-auto-merge.yaml

@@ -1,21 +1,17 @@
----
-name: Auto merge Dependabot updates
+name: Auto reviews updates
 
-on:
-  workflow_run:
-    workflows:
-      - Continuous integration
-    types:
-      - completed
+on: pull_request
 
 jobs:
   auto-merge:
-    name: Auto merge Dependabot updates
+    name: Auto reviews updates
     runs-on: ubuntu-20.04
     timeout-minutes: 5
 
     steps:
-      - name: Auto merge
-        uses: ridedott/dependabot-auto-merge-action@master
+      - name: Auto reviews updates
+        uses: golfzaptw/action-auto-reviews-from-branches@master
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          BRANCHES: master
+          AUTHOR: dependabot[bot],renovatebot