ci: update renovate bot, move setup into gitlab-ci.yml

.gitlab-ci.yml

@@ -1,9 +1,5 @@
 image: registry.gitlab.com/openstapps/projectmanagement/node
 
-include:
-  - project: 'renovate-bot/renovate-runner'
-    file: '/templates/renovate-dind.gitlab-ci.yml'
-
 before_script:
   - npm ci
 
@@ -108,17 +104,6 @@ unlabel:
   tags:
     - secrecy
 
-renovate:
-  image: renovate/renovate:24.97.1-slim@sha256:c821e3af651992c6988de68daa72c34f9d7e709b306e7b6deb83553cb731a0e7
-  stage: maintenance
-  variables:
-    RENOVATE_EXTENDS: "gitlab>openstapps/projectmanagement"
-  only:
-    variables:
-      - $RENOVATE == "true"
-  tags:
-    - gitlab-org-docker
-
 pages:
   stage: deploy
   script:
@@ -144,3 +129,45 @@ package:
   artifacts:
     paths:
       - lib
+
+renovate:
+  image: renovate/renovate:24.114.1-slim@sha256:b5cbb6fb0c1df577b10c46d0312fb5266e1c2bd8df25e91e354b6b8d0483cf71
+  services:
+    - docker:20.10.6-dind@sha256:2636ec38c4567671b24f35683a66d1204bbeed208873a2a11c64dd592742b97a
+  cache:
+    key: ${CI_COMMIT_REF_SLUG}-renovate
+    paths:
+      - $CI_PROJECT_DIR/renovate
+  resource_group: production
+  stage: maintenance
+  variables:
+    DOCKER_DRIVER: overlay2
+    DOCKER_HOST: tcp://docker:2376
+    DOCKER_TLS_VERIFY: 1
+    DOCKER_TLS_CERTDIR: /certs
+    DOCKER_CERT_PATH: /certs/client
+    RENOVATE_EXTENDS: "gitlab>openstapps/projectmanagement"
+    RENOVATE_BASE_DIR: $CI_PROJECT_DIR/renovate
+    RENOVATE_ENDPOINT: $CI_API_V4_URL
+    RENOVATE_PLATFORM: gitlab
+    RENOVATE_OPTIMIZE_FOR_DISABLED: 'true'
+    RENOVATE_REPOSITORY_CACHE: 'true'
+    RENOVATE_REQUIRE_CONFIG: 'true'
+    RENOVATE_ONBOARDING: 'false'
+    RENOVATE_IGNORE_PR_AUTHOR: 'true'
+    RENOVATE_LOG_FILE: renovate-log.ndjson
+    RENOVATE_LOG_FILE_LEVEL: info
+    LOG_LEVEL: warn
+  only:
+    variables:
+      - $RENOVATE == "true"
+  tags:
+    - gitlab-org-docker
+  artifacts:
+    when: always
+    expire_in: 1d
+    paths:
+      - "$RENOVATE_LOG_FILE"
+  before_script: []
+  script:
+    - renovate $RENOVATE_EXTRA_FLAGS