ci(release): install release-please, dependabot groups, stale workflow

.github/dependabot.yml

@@ -19,6 +19,11 @@ updates:
     commit-message:
       prefix: "deps"
       include: "scope"
+    groups:
+      minor-patch:
+        update-types:
+          - "minor"
+          - "patch"
 
   # H3 hardening: was 'docker' at '/' which only scans Dockerfiles at repo
   # root (none here). Switched to 'docker-compose' ecosystem pointed at the
@@ -39,6 +44,11 @@ updates:
       - "docker"
     commit-message:
       prefix: "deps(docker)"
+    groups:
+      minor-patch:
+        update-types:
+          - "minor"
+          - "patch"
 
   # Dockerfile in homelab_manager/ (paperless-ngx build context)
   - package-ecosystem: "docker"
@@ -47,26 +57,36 @@ updates:
       interval: "weekly"
       day: "monday"
     target-branch: "release"
-    open-pull-requests-limit: 3
+    open-pull-requests-limit: 5
     reviewers:
       - "LucasSantana-Dev"
     labels:
       - "dependencies"
       - "docker"
     commit-message:
       prefix: "deps(docker)"
+    groups:
+      minor-patch:
+        update-types:
+          - "minor"
+          - "patch"
 
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
       day: "monday"
     target-branch: "release"
-    open-pull-requests-limit: 3
+    open-pull-requests-limit: 5
     reviewers:
       - "LucasSantana-Dev"
     labels:
       - "dependencies"
       - "github-actions"
     commit-message:
       prefix: "deps(ci)"
+    groups:
+      minor-patch:
+        update-types:
+          - "minor"
+          - "patch"

.github/workflows/release-please.yml

@@ -0,0 +1,18 @@
+name: release-please
+
+on:
+  push:
+    branches: [main]
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4.4.1
+        with:
+          release-type: simple

.github/workflows/stale.yml

@@ -0,0 +1,20 @@
+name: Stale
+
+on:
+  schedule:
+    - cron: "31 5 * * *"
+  workflow_dispatch:
+
+permissions:
+  pull-requests: write
+
+jobs:
+  stale:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
+        with:
+          days-before-issue-stale: -1
+          days-before-issue-close: -1
+          days-before-pr-stale: 30
+          days-before-pr-close: 7

.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "2.13.0"
+}

release-please-config.json

@@ -0,0 +1,8 @@
+{
+  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+  "packages": {
+    ".": {
+      "release-type": "simple"
+    }
+  }
+}