chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• Dockerfile (dockerfile)
• .github/workflows/dependabot-automerge.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• .github/workflows/reuse.yml (github-actions)
• .github/workflows/verify.yml (github-actions)
• go.mod (gomod)
• renovate.json (renovate-config)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs
• Use semantic prefixes for commit messages and PR titles.
• Pin github-action digests.
• Pin Docker digests.

---

What to Expect

With your current configuration, Renovate will create 3 Pull Requests:

chore(deps): pin dependencies

• Schedule: ["before 6am on monday"]
• Branch name: renovate/container-base-images
• Merge into: main
• Upgrade gcr.io/distroless/base-debian13 to sha256:f4a335ca209e1d2ee873102c17c389ad0142e3d5b21aee2817e9cc9c01d87d20
• Upgrade golang to sha256:0178a641fbb4858c5f1b48e34bdaabe0350a330a1b1149aabd498d0699ff5fb2

chore(deps): pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/github-actions
• Merge into: main
• Upgrade actions/checkout to 3d3c42e5aac5ba805825da76410c181273ba90b1
• Upgrade actions/download-artifact to 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• Upgrade actions/setup-go to b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• Upgrade actions/upload-artifact to 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• Upgrade crazy-max/ghaction-import-gpg to 2dc316deee8e90f13e1a351ab510b4d5bc0c82cd
• Upgrade docker/build-push-action to 53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• Upgrade docker/login-action to dbcb813823bdd20940b903addbd779551569679f
• Upgrade docker/setup-buildx-action to bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• Upgrade fsfe/reuse-action to 676e2d560c9a403aa252096d99fcab3e1132b0f5
• Upgrade golangci/golangci-lint-action to ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• Upgrade peter-evans/dockerhub-description to 1b9a80c056b620d92cedb9d9b5a223409c68ddfa
• Upgrade sigstore/cosign-installer to 398d4b0eeef1380460a10c8013a76f728fb906ac
• Upgrade softprops/action-gh-release to 3d0d9888cb7fd7b750713d6e236d1fcb99157228

chore(deps): update sigstore/cosign-installer action to v4

• Schedule: ["at any time"]
• Branch name: renovate/major-github-actions
• Merge into: main
• Upgrade sigstore/cosign-installer to 6f9f17788090df1f26f669e9d70d6ae9567deba6

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.