chore: automate Renovate dependency version bumps

[charlesmulder]

Description

Automate dependency version bumps by configuring Renovate to use fix(deps): commits. Relaxes commitlint to accept any scope for fix type (full Nx project name still required for feat/breaking). Enables automatic patch releases for dependency updates without manual PR title rewrites.

RHCLOUD-49464

---

How to test locally

Validate commitlint behavior:

echo "fix(deps): bump axios to 1.18.0" | npx commitlint        # pass
echo "fix: update something" | npx commitlint                   # pass
echo "feat(deps): add new dep" | npx commitlint                 # fail (correct)
npx jest --config=commitlint.jest.config.js                     # 27 passed

Verify Renovate config:

cat renovate.json  # check commitMessagePrefix override

---

Anything reviewers should know?

Breaking change for commit conventions: fix commits no longer require full Nx project name scope. fix(deps):, fix(rbac):, fix: all valid now. Only feat and breaking changes still enforce full project names.

Rationale: With useCommitScope: true, all fix commits result in patch bumps regardless of scope. Full project name provides no versioning benefit (verified in Nx source semver.ts:44).

Renovate PRs will now auto-trigger releases: Production dep updates → fix(deps): → patch bump for all file-affected packages. Dev deps → chore(deps-dev): → no bump.

---

Checklist

• Tests: new/updated tests cover the change (commitlint.config.test.js)
• API: spec updated if endpoints changed (N/A)
• Migrations: backwards compatible if schema changed (N/A)
• Dependencies: no known impact to dependent services
• Security: reviewed against secure coding checklist (N/A)

AI disclosure

Assisted by: Claude Code