[draft] chore(deps): pin django-ansible-base to tag and enable Renovate

[B-Whitt]

Problem

Currently, eda-server pins django-ansible-base (DAB) to branch = "devel" in pyproject.toml. Therefore, any time poetry lock is run during normal eda-server development — for example, dependency update for a CVE fix — it silently picks up whatever changes have landed on DAB's devel branch as a side effect. This couples unrelated changes together: a routine dependency bump can inadvertently pull in new DAB features, breaking changes, or migrations.

The goal of this PR is to separate these concerns. DAB updates will run independently on their own schedule, in their own PRs, with clear version visibility.

Summary

• Pin DAB to tag = "2026.6.2" instead of branch = "devel" in pyproject.toml
• Re-resolve poetry.lock to the tagged commit
• Enable Renovate's Poetry manager in renovate.json with DAB-specific rules:
  • Weekly schedule (before 9am Monday)
  • loose versioning to handle DAB's CalVer format
  • run-e2e label on PRs to trigger end-to-end tests
  • No automerge — DAB bumps require human review

Changes

• pyproject.toml — branch = "devel" → tag = "2026.6.2"
• poetry.lock — re-resolved to DAB 2026.6.2 (commit 07acd71)
• renovate.json — added poetry to enabledManagers, added packageRules for DAB

Prerequisites

• Confirm the Mend Renovate GitHub App is installed on ansible/eda-server (likely already is since renovate.json is active for Tekton updates)

Notes

• The existing daily autoupdate-poetry.yml workflow is unchanged — it continues handling lockfile drift for other dependencies
• Rollback: revert tag = to branch = "devel" and remove poetry from enabledManagers

Test Plan

• task test passes (unit tests confirmed, integration needs task docker:up:minimal)
• npx renovate-config-validator renovate.json passes
• After merge, Renovate detects next DAB tag and opens a PR

Jira

Resolves: AAP-89364

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}