chore(workflow): allow renovate to bump npm dependencies

[chenjiahan]

Summary

• Allow renovate to bump npm dependencies by removing "enabled": false.
• Bump major in a separate PR by adding "matchUpdateTypes": ["patch", "minor"].
• Let renovate always bump package.json by adding "rangeStrategy": "bump", avoid only updating lock files (such as chore(deps): update dependency sass-loader to v16.0.1 #7633)

Checklist

• Tests updated (or not required).
• Documentation updated (or not required).

[netlify]

✅ Deploy Preview for rspack canceled.

Name	Link
🔨 Latest commit	2ab31aa
🔍 Latest deploy log	https://app.netlify.com/sites/rspack/deploys/66c5c22c62ca5b0009044f0f

[SoonIter]

LGTM

I think it is related to #7156 , I had an idea at that time to distinguish the renovate group to achieve a regular cycle

1. "easy-merge-daily" group like patch or minor change of sass file-loader less-loader postcss-loader webpack etc

2. "hard-merge-weekly-or-monthly" group like major version ofswc react sass-embed skykv rspack-resolver etc (the developer needs to change the API call manually)

this is my ultimate goal, I'm not sure if it can be achieved. At present, I haven't merged regularly.

[chenjiahan]

Nice, for the easy-merge groups, I prefer weekly upgrades, because we do not want to approve the PR every day.

For the hard-merge groups, each one should be handled separately, as they usually require changes.