Add GitHub infra

Author: DanielHreben

.github/renovate.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:recommended"],
+  "repositories": ["atlassian-labs/lexicographic-keys"],
+  "packageRules": [
+    {
+      "matchUpdateTypes": ["minor", "patch"],
+      "groupName": "all non-major dependencies",
+      "groupSlug": "all-minor-patch"
+    }
+  ],
+  "prConcurrentLimit": 3,
+  "prHourlyLimit": 2,
+  "commitMessagePrefix": "chore:",
+  "commitMessageAction": "update",
+  "commitMessageTopic": "{{depName}}",
+  "commitMessageExtra": "to {{newVersion}}",
+  "semanticCommits": "enabled"
+}

.github/workflows/package-validation.yml

@@ -2,47 +2,33 @@ name: Update Dependencies
 
 on:
   schedule:
-    # Run weekly on Mondays at 9 AM UTC
-    - cron: '0 9 * * 1'
+    # Run twice a week - Mondays and Fridays at 9 AM Sydney time (11 PM UTC Sunday/Thursday)
+    - cron: '0 23 * * 0,4'  # Sunday 11 PM UTC = Monday 9 AM Sydney, Thursday 11 PM UTC = Friday 9 AM Sydney
   workflow_dispatch: # Allow manual trigger
 
 jobs:
-  update-dependencies:
+  renovate:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      issues: write
+      repository-projects: write
+      statuses: write
+      checks: write
+      actions: read
+      security-events: read
     if: github.repository_owner == 'atlassian-labs'
 
     steps:
-      - name: Checkout code
+      - name: Checkout
         uses: actions/checkout@v4
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          cache: 'yarn'
-
-      - name: Update dependencies
-        run: |
-          yarn upgrade --latest
-          yarn install
-
-      - name: Run tests
-        run: |
-          yarn lint
-          yarn test
-          yarn build
-
-      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v6
+      - name: Self-hosted Renovate
+        uses: renovatebot/[email protected]
         with:
+          configurationFile: .github/renovate.json
           token: ${{ secrets.GITHUB_TOKEN }}
-          commit-message: 'chore: update dependencies'
-          title: 'chore: update dependencies'
-          body: |
-            Automated dependency update.
-
-            Please review the changes and ensure all tests pass before merging.
-          branch: chore/update-dependencies
-          delete-branch: true
+        env:
+          RENOVATE_PLATFORM_COMMIT: 'true'
+          LOG_LEVEL: 'debug'

.github/workflows/update-dependencies.yml

@@ -1,6 +1,6 @@
 {
   "name": "@lexicographic/keys",
-  "version": "0.9.0",
+  "version": "1.0.0",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "license": "Apache-2.0",
@@ -17,7 +17,7 @@
     "lsi",
     "sorted keys"
   ],
-  "public": true,
+  "private": false,
   "contributors": [
     {
       "name": "Daniel Hreben",
@@ -62,4 +62,4 @@
     "typescript": "^5.9.2",
     "typescript-eslint": "^8.39.0"
   }
-}
+}