ci: add autopilot

Signed-off-by: Mateusz Urbanek <[email protected]>

.github/workflows/autopilot.yaml

@@ -0,0 +1,15 @@
+name: autopilot
+
+on: pull_request_target
+
+jobs:
+  auto-approve:
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+    steps:
+      - if: |
+          contains(github.event.pull_request.labels.*.name, 'area/dependency') &&
+          !contains(github.event.pull_request.labels.*.name, 'do-not-merge') &&
+          github.actor == 'renovate[bot]'
+        uses: hmarr/auto-approve-action@v4

renovate.json

@@ -1,9 +1,15 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [ "config:recommended" ],
-  "labels": [ "area/dependency" ],
   "automerge": true,
+  "labels": [
+    "area/dependency"
+  ],
+  "osvVulnerabilityAlerts": true,
   "vulnerabilityAlerts": {
-    "enabled": true
+    "enabled": true,
+    "labels": [
+      "kind/security"
+    ]
   }
 }