build: use dependency cooldown logic (#330)

In this commit we add dependency cooldown logic
that enables us to update more frequently and worry
less about compromised packages.

Signed-off-by: András Felleg <afelleg@gmail.com>

Author: Andris28

.npmrc

@@ -1 +1,2 @@
-package-lock=false
+package-lock=false
+minimummin-release-age=3

pyproject.toml

@@ -61,3 +61,9 @@ packages = ["ibm_platform_services"]
 [tool.black]
 line-length = 120
 skip-string-normalization = true
+
+[tool.pip.install]
+uploaded-prior-to = "P3D"
+
+[tool.uv]
+exclude-newer = "3 days"

renovate.json

@@ -1,4 +1,19 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:recommended"]
-}
+  "extends": ["config:recommended"],
+  "prConcurrentLimit": 4,
+  "reviewers": ["pyrooka", "diatrcz", "Andris28"],
+  "packageRules": [
+    {
+      "matchManagers": ["pep621"],
+      "matchDatasources": ["pypi"],
+      "minimumReleaseAge": "3 days",
+      "description": "Wait 3 days before updating Python dependencies"
+    },
+    {
+      "matchManagers": ["npm"],
+      "extends": ["security:minimumReleaseAgeNpm"],
+      "description": "Wait 3 days before updating semantic release dependencies"
+    }
+  ]
+}