fix(ci): replace dependabot with renovate for Gitea compatibility

Dependabot only works on GitHub. This repo is hosted on Gitea which
requires Renovate for dependency updates.

- Remove .github/dependabot.yml (unused on Gitea)
- Add renovate.json with recommended config
- Configure npm package updates for / and /backend
- Configure GitHub Actions workflow updates
- Enable automerge for dev dependency minor/patch updates

.github/dependabot.yml

@@ -1,32 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: "npm"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "06:00"
-    open-pull-requests-limit: 5
-    reviewers:
-      - "tuan-dat-tran"
-    labels:
-      - "dependencies"
-    commit-message:
-      prefix: "deps"
-      include: "scope"
-      
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "06:00"
-    open-pull-requests-limit: 3
-    reviewers:
-      - "tuan-dat-tran"
-    labels:
-      - "dependencies"
-      - "github-actions"
-    commit-message:
-      prefix: "ci"
-      include: "scope"

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:25-alpine as build
+FROM node:20-alpine as build
 
 WORKDIR /app
 

backend/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:25-slim
+FROM node:20-slim
 
 WORKDIR /app
 

backend/package.json

@@ -9,9 +9,9 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "better-sqlite3": "^12.0.0",
+    "better-sqlite3": "^11.7.0",
     "cors": "^2.8.5",
-    "express": "^5.0.0",
+    "express": "^4.21.2",
     "knex": "^3.1.0",
     "swagger-jsdoc": "^6.2.8",
     "swagger-ui-express": "^5.0.1"

package.json

@@ -32,7 +32,7 @@
   ],
   "dependencies": {
     "framer-motion": "^12.34.1",
-    "lucide-react": "^0.577.0",
+    "lucide-react": "^0.574.0",
     "react": "^19.2.0",
     "react-dom": "^19.2.0",
     "react-router-dom": "^7.13.0"
@@ -40,7 +40,7 @@
   "devDependencies": {
     "@commitlint/cli": "^20.4.2",
     "@commitlint/config-conventional": "^20.4.2",
-    "@eslint/js": "^10.0.0",
+    "@eslint/js": "^9.39.1",
     "@lhci/cli": "^0.15.1",
     "@playwright/test": "^1.58.2",
     "@semantic-release/changelog": "^6.0.3",
@@ -51,17 +51,17 @@
     "@testing-library/react": "^16.3.2",
     "@types/react": "^19.2.7",
     "@types/react-dom": "^19.2.3",
-    "@vitejs/plugin-react": "^6.0.0",
+    "@vitejs/plugin-react": "^5.1.1",
     "@vitest/coverage-v8": "^4.0.18",
     "autoprefixer": "^10.4.24",
     "better-sqlite3": "^12.6.2",
     "bundlesize": "^0.18.2",
     "cors": "^2.8.6",
-    "eslint": "^10.0.0",
+    "eslint": "^9.39.1",
     "eslint-plugin-react-hooks": "^7.0.1",
-    "eslint-plugin-react-refresh": "^0.5.0",
+    "eslint-plugin-react-refresh": "^0.4.24",
     "express": "^5.2.1",
-    "globals": "^17.0.0",
+    "globals": "^16.5.0",
     "husky": "^9.1.7",
     "jsdom": "^28.1.0",
     "postcss": "^8.5.6",

renovate.json

@@ -1,3 +1,37 @@
 {
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ],
+  "timezone": "Europe/Berlin",
+  "schedule": ["on monday before 10:00am"],
+  "prConcurrentLimit": 5,
+  "prHourlyLimit": 2,
+  "labels": ["dependencies"],
+  "commitMessagePrefix": "deps",
+  "commitMessageAction": "update",
+  "packageRules": [
+    {
+      "matchManagers": ["npm"],
+      "rangeStrategy": "bump",
+      "semanticCommitType": "deps",
+      "semanticCommitScope": "{{packageFileDir}}"
+    },
+    {
+      "matchManagers": ["github-actions"],
+      "semanticCommitType": "ci",
+      "semanticCommitScope": "actions",
+      "groupName": "github-actions"
+    },
+    {
+      "matchDepTypes": ["devDependencies"],
+      "matchUpdateTypes": ["minor", "patch"],
+      "automerge": true
+    }
+  ],
+  "lockFileMaintenance": {
+    "enabled": true,
+    "schedule": ["on the first day of the month"]
+  },
+  "postUpdateOptions": ["npmDedupe"]
 }