rust-lang/rust: Enable forking-renovate bot

[Turbo87]

This enables Renovate to pin GitHub Actions to SHAs and keep them up-to-date.

See rust-lang/rust#155089 (comment)

r? @marcoieni

[rustbot]

Error: The feature assign is not enabled in this repository.
To enable it add its section in the triagebot.toml in the root of the repository.

Please file an issue on GitHub at triagebot if there's a problem with this bot, or reach out on #triagebot on Zulip.

[github-actions]

Dry-run check results

[WARN  rust_team::sync] sync-team is running in dry mode, no changes will be applied.
[INFO  rust_team::sync] synchronizing crates-io
[INFO  rust_team::sync] synchronizing github
[INFO  rust_team::sync] 💻 Repo Diffs:
    📝 Editing repo 'rust-lang/rust':
      App installation changes:
        Install app Forking RenovateBot
    📝 Editing repo 'rust-lang/std-replacement-data':
      Environments:
        ❌ Delete: github-pages

[marcoieni]

Before approving this we need to change https://github.com/rust-lang/rust/blob/main/.github/renovate.json5 to only update github actions. Otherwise renovate starts opening a lot of PRs.

The code examples here (of the renovate config) should be helpful: https://github.com/rust-lang/renovate#security-only-updates

[Turbo87]

Otherwise renovate starts opening a lot of PRs.

are you sure about that? https://github.com/rust-lang/rust/blob/main/.github/renovate.json5#L6 looks to me like it currently has everything disabled except for the lockfile updates 🤔

[marcoieni]

oh, you are right. But we should also delete lockFileMaintenance imo, because that was broken I remember

[Turbo87]

see rust-lang/rust#157952