security/cms updates via dependabot, else renovate

.dependabot/config.yml

@@ -3,7 +3,12 @@ version: 1
 update_configs:
   - package_manager: javascript
     directory: /
-    update_schedule: weekly
+    update_schedule: live
+    allowed_updates:
+      - match:
+          update_type: security
+      - match:
+          dependency_name: netlify-cms*
     automerged_updates:
       - match:
           dependency_type: all

renovate.json

@@ -1,10 +1,3 @@
 {
-  "extends": [
-    "config:base"
-  ],
-  "rangeStrategy": "replace",
-  "lockFileMaintenance": {
-    "enabled": true,
-    "extends": "schedule:weekly"
-  }
+  "extends": ["github>netlify-templates/netlify-cms-renovate-config"]
 }