ci: add tact-bot for update Tact version and tests

.github/renovate.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:recommended"],
+  "baseBranches": ["main"],
+  "branchName": "td-nature",
+  "branchNameStrict": true,
+  "branchConcurrentLimit": 5,
+  "prFooter": "",
+  "prConcurrentLimit": 1,
+  "separateMajorMinor": false,
+  "separateMinorPatch": false,
+  "enabledManagers": ["npm"],
+  "timezone": "Europe/Moscow",
+  "packageRules": [
+    {
+      "matchPackagePatterns": ["*"],
+      "enabled": false
+    },
+    {
+      "matchPackagePatterns": ["@tact-lang/compiler"],
+      "enabled": true
+    },
+    {
+      "matchUpdateTypes": ["minor", "patch"],
+      "groupSlug": "non-major"
+    }
+  ]
+}

.github/workflows/bot.yml

@@ -0,0 +1,37 @@
+name: Update Tact Version
+
+on:
+  workflow_dispatch:
+  repository_dispatch:
+    types: [update]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generate GitHub App token
+        id: app-token
+        uses: tibdex/github-app-token@v2
+        with:
+          app_id: ${{ secrets.GH_APP_ID }}
+          private_key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+          fetch-depth: 0
+
+      - name: Run Renovate
+        uses: renovatebot/[email protected]
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+          configurationFile: .github/renovate.json
+        env:
+          RENOVATE_AUTODISCOVER: "false"
+          RENOVATE_REPOSITORIES: ${{ github.repository }}
+          LOG_LEVEL: "debug"