chore: Add Renovate bot for automated dependency updates (#59)

- Add renovate.json configuration same as we have in other projects.
- Relax dev dependency version constraints in pyproject.toml.
- Update typos action to use major version v1.

Resolves security alerts:
- https://github.com/apify/apify-shared-python/security/dependabot/1
- https://github.com/apify/apify-shared-python/security/dependabot/2
- https://github.com/apify/apify-shared-python/security/dependabot/3

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Author: vdusek

.github/workflows/_check_code.yaml

@@ -24,7 +24,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v6
       - name: Check spelling with typos
-        uses: crate-ci/typos@v1.40.0
+        uses: crate-ci/typos@v1
 
   lint_check:
     name: Lint check

pyproject.toml

@@ -43,15 +43,15 @@ dependencies = []
 
 [dependency-groups]
 dev = [
-    "dycw-pytest-only~=2.1.0",
+    "dycw-pytest-only<3.0.0",
     "poethepoet<1.0.0",
-    "pre-commit~=4.3.0",
-    "pytest-asyncio~=1.1.0",
-    "pytest-cov~=6.2.0",
-    "pytest-timeout~=2.4.0",
-    "pytest-xdist~=3.8.0",
-    "pytest~=8.4.0",
-    "ruff~=0.12.0",
+    "pre-commit<5.0.0",
+    "pytest-asyncio<2.0.0",
+    "pytest-cov<8.0.0",
+    "pytest-timeout<3.0.0",
+    "pytest-xdist<4.0.0",
+    "pytest<9.0.0",
+    "ruff~=0.14.0",
     "setuptools", # setuptools are used by pytest, but not explicitly required
     "ty~=0.0.0",
 ]

renovate.json

@@ -0,0 +1,25 @@
+{
+    "extends": ["config:base", ":semanticCommitTypeAll(chore)"],
+    "ignorePaths": ["docs/**"],
+    "pinVersions": false,
+    "separateMajorMinor": false,
+    "dependencyDashboard": false,
+    "semanticCommits": "enabled",
+    "lockFileMaintenance": {
+        "enabled": true,
+        "automerge": true,
+        "automergeType": "branch"
+    },
+    "packageRules": [
+        {
+            "matchPaths": ["pyproject.toml"],
+            "matchDepTypes": ["devDependencies"],
+            "matchUpdateTypes": ["major", "minor"],
+            "groupName": "major/minor dev dependencies",
+            "groupSlug": "dev-dependencies",
+            "automerge": true,
+            "automergeType": "branch"
+        }
+    ],
+    "schedule": ["before 7am every weekday"]
+}

tests/unit/test_utils.py

@@ -58,6 +58,6 @@ def test_create_storage_content_signature_with_expiration() -> None:
         expires_in_millis=10000,
     )
 
-    version, expires_at, hmac = base64.urlsafe_b64decode(signature).decode('utf-8').split('.')
+    version, expires_at, _ = base64.urlsafe_b64decode(signature).decode('utf-8').split('.')
     assert version == '0'
     assert expires_at != '0'