chore(deps): activate Renovate on the default branch

[suiramdev]

Summary

Puts renovate.json5 and the workflow_dispatch trigger of ci.yml on the default branch. Renovate reads its configuration from the default branch alone, so #48 has no effect until these two files land here. Nothing else from #48 is in this pull request; the documentation, the lock file job and the engineering notes ride in with the next merge from dev.

Motivation

• useBaseBranchConfig defaults to none, so naming dev as the base branch does not change where Renovate reads the file from.
• Without this, the Mend app onboards the repository against main with config:recommended defaults: no catalog manager, no schedule, no automerge rules and the wrong base branch.
• GitHub reads the workflow_dispatch trigger from the default branch too, so the lock file job cannot restart CI until ci.yml carries it here.

Drawbacks

• main carries two files ahead of a release, which the branch convention does not otherwise do.
• main and dev differ on ci.yml and renovate.json5 until the next merge from dev. Both sides hold identical content, so that merge stays clean.

Prior art

• A dev to main merge is how this repository usually moves code, and it is what Merge dev into main #43 and Merge dev into main #45 did. It would carry the oxslop migration to main as well, which is a separate decision and belongs to a release rather than to this change.
• Leaving the onboarding pull request from Renovate to configure the repository is the documented alternative, and it writes stock defaults. Committing the configuration to the default branch is the manual onboarding path the Renovate documentation describes.

Notes

• No visual change, no code change, no documentation change. Two files, 109 insertions.
• renovate-config-validator passes on this branch with no migration warning.
• Depends on chore(deps): set up Renovate across the monorepository #48, which is merged.
• After this merges, close the Configure Renovate onboarding pull request without merging it. Renovate is onboarded by this file.
• Review summary: configuration only.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: d3cba4f1-626d-48e4-b95d-fe66f4a82835

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}