chore: add minimum release age and vulnerability alerts to renovate config (cypress-io#1776)

Add a 7-day minimum release age for all dependencies to avoid
pulling in potentially unstable new releases. Exempt the cypress
package from this cooldown so updates are available immediately.

Enable OSV vulnerability alerts and bypass the cooldown period
for vulnerability fixes so they are addressed without delay.

Author: mschile

renovate.json

@@ -14,6 +14,11 @@
   ],
   "prConcurrentLimit": 5,
   "prHourlyLimit": 1,
+  "minimumReleaseAge": "7 days",
+  "osvVulnerabilityAlerts": true,
+  "vulnerabilityAlerts": {
+    "minimumReleaseAge": "0 days"
+  },
   "rangeStrategy": "bump",
   "lockFileMaintenance": {
     "enabled": true
@@ -71,6 +76,10 @@
       "matchDepTypes": ["uses-with"],
       "matchPackageNames": ["pnpm"],
       "enabled": false
+    },
+    {
+      "matchPackageNames": ["cypress"],
+      "minimumReleaseAge": "0 days"
     }
   ]
 }