chore: renovate config fixes and changes (#22224)

* adjust config

* add more

* moar

* switch to json5

renovate.json5

@@ -0,0 +1,60 @@
+{
+  extends: ["config:base", ":disablePeerDependencies"],
+  includePaths: [
+    "package.json",
+    "starters/**",
+    "packages/**",
+    "www/package.json",
+  ],
+  major: {
+    masterIssueApproval: true,
+  },
+  masterIssue: true,
+  rebaseStalePrs: false,
+  ignoreDeps: ["react", "react-dom"],
+  rangeStrategy: "bump",
+  bumpVersion: null,
+  semanticCommitScope: null,
+  prHourlyLimit: 0,
+  packageRules: [
+    {
+      groupName: "minor updates in packages",
+      updateTypes: ["minor"],
+      excludePackageNames: [
+        // below is list of packages that use 0.X version range, any minor bump there can contain breaking changes, so we just ignore minor bumps for those packages and will need to bump them manually
+        "@reach/skip-nav",
+        "@theme-ui/prism",
+        "@theme-ui/typography",
+        "axios",
+        "babel-preset-gatsby",
+        "sharp",
+        "gatsby-plugin-theme-ui",
+        "graphiql-explorer",
+        "guess-webpack",
+        "jest-silent-reporter",
+        "js-combinatorics",
+        "jscodeshift",
+        "mini-css-extract-plugin",
+        "react-refresh",
+        "scroll-behavior",
+        "theme-ui",
+        "webpack-stats-plugin",
+        "xlsx",
+        "zipkin",
+        "zipkin-transport-http",
+        // below is list of packages that we use alpha/beta/next/canary, where it's not really safe to bump automatically and need extra caution
+        "react-docgen",
+      ],
+    },
+    {
+      groupName: "patch updates in packages",
+      updateTypes: ["patch"],
+    },
+    {
+      depTypeList: ["engines"],
+      enabled: false,
+    },
+  ],
+  timezone: "GMT",
+  schedule: "after 10am on Monday",
+}