add renovate and fix ci

.github/renovate.json5

@@ -0,0 +1,24 @@
+{
+  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+  extends: [
+    'config:best-practices',
+    'security:openssf-scorecard',
+    ':semanticCommits',
+    ':pinVersions',
+  ],
+  configMigration: true,
+  dockerfile: {
+    managerFilePatterns: ['/Earthfile/'],
+  },
+  customManagers: [
+    {
+      customType: 'regex',
+      description: 'Update _version ARGs and ENVs in Earthfile',
+      managerFilePatterns: ['/^Earthfile$/'],
+      matchStrings: [
+        '#\\s*renovate:\\s*datasource=(?<datasource>[a-z-]+?)(?:\\s+depName=(?<depName>.+?))?\\s+packageName=(?<packageName>.+?)(?:\\s+versioning=(?<versioning>[a-z-]+?))?\\s+(?:ENV|ARG)\\s+.+?(_VERSION|_VER|_version)=(?<currentValue>.+?)\\s',
+      ],
+    },
+  ],
+  labels: ['renovate'],
+}