chore(deps): add renovate configuration

[overbalance]

What problem is this solving?

Replaces Dependabot with Renovate for better monorepo support, automatic discovery of workspace dependencies, and more intelligent grouping of OpenTelemetry updates.

Short description of changes

• Add renovate.json configuration in .github directory
• Group OpenTelemetry packages with 3-day stability window
• Group production dependencies with 5-day stability window
• Auto-merge patches for build tooling (@swc, biome, esbuild, etc)
• Auto-merge minor/patch updates for GitHub Actions
• Enable dependency dashboard for centralized update tracking
• Configure weekly Monday morning schedule with 5 concurrent PRs limit
• Enable monthly lockfile maintenance

Testing

• Install Renovate GitHub App on repository
• Verify onboarding PR is created with correct configuration
• Confirm Renovate respects grouping rules and creates organized PRs
• After verification period, remove .github/dependabot.yml

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[github-actions]

Performance results

CDP Performance Tests

	Number of Requests	Size of Requests	Script Duration	Task Duration	Heap Used Size
Requests	+3 requests	+29.77 KB
Page Loaded			+15.70 ms	+3.25 ms	+0.91 MB
Generate 100 fetch requests			+16.27 ms	+61.17 ms	+1.92 MB
Generate 100 XHR requests			+36.08 ms	+89.74 ms	+2.26 MB
Click 100 buttons and generate 100 logs			+27.31 ms	+41.98 ms	+2.85 MB
Throw a 100 exceptions			+1.42 ms	+21.01 ms	+2.10 MB
End Session			+7.62 ms	+15.12 ms	+2.94 MB
Total	+3 requests	+29.77 KB	+104.41 ms	+232.27 ms	+12.98 MB

Lighthouse Startup Performance Tests

	Difference	Description
Total Blocking Time	0 ms	Difference in Total Blocking Time: Sum of all time periods between FCP and Time to Interactive, when task length exceeded 50ms, expressed in milliseconds. Learn more about the Total Blocking Time metric.
Main Thread Time	+60.52 ms	Difference in Main Thread Time: Consider reducing the time spent parsing, compiling and executing JS. You may find delivering smaller JS payloads helps with this. Learn how to minimize main-thread work
Script Evaluation Time	+44.90 ms	Difference in Script Evaluation Time: Consider reducing the time spent parsing, compiling, and executing JS. You may find delivering smaller JS payloads helps with this. Learn how to reduce Javascript execution time.

[github-actions]

build results

vite-7 Platform Tests

	Total Uncompressed Size	Total Gzip Size
vite-7 - esnext	+165.17 KB	+47.82 KB
vite-7 - es2015	+172.04 KB	+49.48 KB

vite-otel-latest Platform Tests

	Total Uncompressed Size	Total Gzip Size
vite-otel-latest - esnext	+164.24 KB	+49.49 KB
vite-otel-latest - es2015	+171.03 KB	+51.11 KB

webpack-5 Platform Tests

	Total Uncompressed Size	Total Gzip Size
webpack-5 - esnext	+122.81 KB	+43.23 KB
webpack-5 - es2015	+123.49 KB	+44.69 KB

[jpmunz]

I would get @embrace-io/opensource-devops 's feedback on this if we're considering a dependabot alternative since that's used across all the other repos as well, primarily a) is there any concern with moving to renovatebot and b) if not and we find this more useful should we consider doing a similar switch on other repos?

[overbalance]

If we decide to use renovate, it will be in the branch auto-created by the github app: #964