chore(renovate): group all dependency updates into one weekly PR (#38547)

Group updates from all managers into a single `dependencies` group so
monday produces one combined PR instead of one per manager, matching
what is regularly done manually to reduce CI waiting time. The `gomod`
and `npm` rules remain for their `postUpgradeTasks`, which run once on
the combined branch.

Also replace the all-day monday schedule with the `schedule:weekly`
preset (monday 0-4 UTC) so updates whose `minimumReleaseAge` lapses
later in the day wait for the next weekly batch instead of raising a new
PR the same day, as happened in
https://github.com/go-gitea/gitea/pull/38546. `vulnerabilityAlerts` and
the go toolchain rule bypass the schedule as before.

renovate.json5

@@ -1,11 +1,15 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:recommended", "helpers:pinGitHubActionDigests", "customManagers:githubActionsVersions"],
+  "extends": [
+    "config:recommended",
+    "helpers:pinGitHubActionDigests",
+    "customManagers:githubActionsVersions",
+    "schedule:weekly", // dependency update PR on monday, vulnerabilityAlerts bypasses this
+  ],
   "configMigration": true,
   "enabledManagers": ["github-actions", "gomod", "npm", "pep621", "nix", "custom.regex", "dockerfile"],
   "labels": ["dependencies"],
   "branchPrefix": "renovate/",
-  "schedule": ["* * * * 1"], // dependency update PRs weekly, vulnerabilityAlerts bypasses this
   "separateMajorMinor": false, // include major updates in group PRs
   "minimumReleaseAge": "5 days",
   "semanticCommits": "enabled",
@@ -27,12 +31,9 @@
   "packageRules": [
     {
       "matchPackageNames": ["*"],
+      "groupName": "dependencies", // single weekly PR for all dependency updates
       "semanticCommitType": "chore", // dep updates are rarely fixes for gitea
     },
-    {
-      "groupName": "action dependencies",
-      "matchManagers": ["github-actions"],
-    },
     {
       "matchPackageNames": ["@mcaptcha/vanilla-glue"],
       "allowedVersions": "^0.1", // breaking changes in rc versions need to be handled
@@ -82,7 +83,6 @@
       "allowedVersions": "/^2019($|[.-])/", // pin to oldest in extended support
     },
     {
-      "groupName": "go dependencies",
       "matchManagers": ["gomod"],
       "postUpdateOptions": ["gomodUpdateImportPaths"],
       "postUpgradeTasks": {
@@ -95,11 +95,6 @@
         "executionMode": "branch",
       },
     },
-    {
-      "groupName": "tool dependencies",
-      "matchManagers": ["custom.regex"],
-      "matchFileNames": ["**/Makefile"],
-    },
     {
       "matchManagers": ["gomod"],
       "matchDepNames": ["go"],
@@ -109,7 +104,6 @@
       "minimumReleaseAge": "0",
     },
     {
-      "groupName": "npm dependencies",
       "matchManagers": ["npm"],
       "postUpdateOptions": ["pnpmDedupe"],
       "postUpgradeTasks": {
@@ -125,17 +119,5 @@
         "executionMode": "branch",
       },
     },
-    {
-      "groupName": "python dependencies",
-      "matchManagers": ["pep621"],
-    },
-    {
-      "groupName": "nix dependencies",
-      "matchManagers": ["nix"],
-    },
-    {
-      "groupName": "docker dependencies",
-      "matchManagers": ["dockerfile"],
-    },
   ],
 }