Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• build/Dockerfile (dockerfile)
• .github/workflows/ci.yml (github-actions)
• .github/workflows/codeql-analysis.yml (github-actions)
• .github/workflows/dependabot-auto-merge.yml (github-actions)
• .github/workflows/dependency-review.yml (github-actions)
• .github/workflows/dockerhub-description.yml (github-actions)
• .github/workflows/f5-cla.yml (github-actions)
• .github/workflows/fossa.yml (github-actions)
• .github/workflows/labeler.yml (github-actions)
• .github/workflows/lint.yml (github-actions)
• .github/workflows/notifications.yml (github-actions)
• .github/workflows/scorecards.yml (github-actions)
• .github/workflows/stale.yml (github-actions)
• go.mod (gomod)
• .pre-commit-config.yaml (pre-commit)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Enable Docker major updates.
• Pin github-action digests.
• Append Signed-off-by: to signoff Git commits.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 6 Pull Requests:

Update anchore/sbom-action action to v0.17.2

• Schedule: ["at any time"]
• Branch name: renovate/anchore-sbom-action-0.x
• Merge into: main
• Upgrade anchore/sbom-action to 61119d458adab75f756bc0b9e4bde25725f86a7a

Update anchore/scan-action action to v4.1.2

• Schedule: ["at any time"]
• Branch name: renovate/anchore-scan-action-4.x
• Merge into: main
• Upgrade anchore/scan-action to 64a33b277ea7a1215a3c142735a1091341939ff5

Update module github.com/prometheus/client_golang to v1.20.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-prometheus-client_golang-1.x
• Merge into: main
• Upgrade github.com/prometheus/client_golang to v1.20.1

Update contributor-assistant/github-action action to v2.5.1

• Schedule: ["at any time"]
• Branch name: renovate/contributor-assistant-github-action-2.x
• Merge into: main
• Upgrade contributor-assistant/github-action to f41946747f85d28e9a738f4f38dbcc74b69c7e0e

Update docker/dockerfile Docker tag to v1.9

• Schedule: ["at any time"]
• Branch name: renovate/docker-dockerfile-1.x
• Merge into: main
• Upgrade docker/dockerfile to 1.9

Update pre-commit hook golangci/golangci-lint to v1.60.2

• Schedule: ["at any time"]
• Branch name: renovate/golangci-golangci-lint-1.x
• Merge into: main
• Upgrade golangci/golangci-lint to v1.60.2

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.