ci: add renovate config and proper branch protection

.github/renovate.json

@@ -1,8 +1,49 @@
 {
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
     "extends": [
-        "config:base"
+        "config:recommended",
+        ":semanticCommits",
+        ":semanticCommitType(deps)"
+    ],
+    "packageRules": [
+        {
+            "description": "Semantic commits for major updates",
+            "matchUpdateTypes": [
+                "major"
+            ],
+            "semanticCommitType": "major",
+            "semanticCommitScope": "deps",
+            "automerge": true
+        },
+        {
+            "description": "Semantic commits for minor updates",
+            "matchUpdateTypes": [
+                "minor"
+            ],
+            "semanticCommitType": "minor",
+            "semanticCommitScope": "deps",
+            "automerge": true
+        },
+        {
+            "description": "Semantic commits for patch updates",
+            "matchUpdateTypes": [
+                "patch"
+            ],
+            "semanticCommitType": "patch",
+            "semanticCommitScope": "deps",
+            "automerge": true
+        },
+        {
+            "description": "Build tool version upgrades",
+            "matchManagers": [
+                "github-actions"
+            ],
+            "semanticCommitType": "ci",
+            "semanticCommitScope": "tools",
+            "automerge": true
+        }
     ],
     "labels": [
         "renovate"
     ]
-}
+}

.github/settings.yml

@@ -54,10 +54,11 @@ labels:
 branches:
   - name: master
     protection:
+      required_pull_request_reviews: null
       required_status_checks:
         strict: true
         contexts:
-          - build
+          - check
       enforce_admins: false
       restrictions:
         apps: