ci: change renovate image to latest

without slim image, built dependency files are updated by renovate (poetry.lock, package-lock.json, composer.json, etc ...)