Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: Configure Renovate #282

Closed
wants to merge 1 commit into from
Closed

Conversation

elastic-renovate-prod[bot]
Copy link

@elastic-renovate-prod elastic-renovate-prod bot commented Aug 8, 2024

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • Dockerfile (dockerfile)
  • .github/workflows/codeql-analysis.yml (github-actions)
  • .github/workflows/docker.yml (github-actions)
  • .github/workflows/go.yml (github-actions)
  • .github/workflows/releaser.yml (github-actions)
  • .github/workflows/security.yml (github-actions)
  • go.mod (gomod)
  • samples/bundle-remapper/go.mod (gomod)
  • tools/go.mod (gomod)
  • Dockerfile (regex)
  • Dockerfile (regex)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Chainguard Renovate configuration (https://ela.st/wolfi)
  • Chainguard Renovate configuration (https://ela.st/wolfi)
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.
  • Pin Docker digests.
  • Pin github-action digests.
  • Pin dependency versions for devDependencies.
  • Preset with best practices from the Renovate maintainers. Recommended for advanced users, who want to follow our best practices.
  • Shared Renovate configuration for an out-of-the-box set of defaults for Renovate at Elastic

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


What to Expect

With your current configuration, Renovate will create 89 Pull Requests:

chore(deps): pin dependencies
chore(deps): update gcr.io/projectsigstore/cosign:v1.6.0 docker digest to b667002
  • Schedule: ["at any time"]
  • Branch name: renovate/gcr.io-projectsigstore-cosign-v1.6.0
  • Merge into: main
  • Upgrade gcr.io/projectsigstore/cosign to sha256:b667002156c4bf9fedd9273f689b800bb5c341660e710e3bbac981c9795423d9
fix(deps): update github.com/fernet/fernet-go digest to 303da6a
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-fernet-fernet-go-digest
  • Merge into: main
  • Upgrade github.com/fernet/fernet-go to 303da6aec611
fix(deps): update github.com/psanford/memfs digest to 02fb08c
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-psanford-memfs-digest
  • Merge into: main
  • Upgrade github.com/psanford/memfs to 02fb08c0f8db
fix(deps): update google.golang.org/genproto digest to 5fefd90
  • Schedule: ["at any time"]
  • Branch name: renovate/google.golang.org-genproto-digest
  • Merge into: main
  • Upgrade google.golang.org/genproto to 5fefd90f89a9
chore(deps): update sonatype-nexus-community/nancy-github-action action to v1.0.3
chore(deps): update zenithar/gh-gomod-generate-sbom action to v1.0.3
  • Schedule: ["at any time"]
  • Branch name: renovate/zenithar-gh-gomod-generate-sbom-1.x
  • Merge into: main
  • Upgrade Zenithar/gh-gomod-generate-sbom to 2cdc82f8e362b12fdec116b716ce0130baec8be2
fix(deps): update module github.com/awnumar/memguard to v0.22.5
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-awnumar-memguard-0.x
  • Merge into: main
  • Upgrade github.com/awnumar/memguard to v0.22.5
fix(deps): update module github.com/elastic/go-licenser to v0.4.2
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-elastic-go-licenser-0.x
  • Merge into: main
  • Upgrade github.com/elastic/go-licenser to v0.4.2
fix(deps): update module github.com/go-zookeeper/zk to v1.0.4
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-go-zookeeper-zk-1.x
  • Merge into: main
  • Upgrade github.com/go-zookeeper/zk to v1.0.4
fix(deps): update module github.com/golang/protobuf to v1.5.4
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-golang-protobuf-1.x
  • Merge into: main
  • Upgrade github.com/golang/protobuf to v1.5.4
fix(deps): update module github.com/google/gops to v0.3.28
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-google-gops-0.x
  • Merge into: main
  • Upgrade github.com/google/gops to v0.3.28
fix(deps): update module github.com/imdario/mergo to v0.3.16
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-imdario-mergo-0.x
  • Merge into: main
  • Upgrade github.com/imdario/mergo to v0.3.16
fix(deps): update module github.com/ulikunitz/xz to v0.5.12
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-ulikunitz-xz-0.x
  • Merge into: main
  • Upgrade github.com/ulikunitz/xz to v0.5.12
fix(deps): update module go.etcd.io/etcd/client/v3 to v3.5.16
  • Schedule: ["at any time"]
  • Branch name: renovate/go.etcd.io-etcd-client-v3-3.x
  • Merge into: main
  • Upgrade go.etcd.io/etcd/client/v3 to v3.5.16
fix(deps): update module gopkg.in/yaml.v3 to v3.0.1
  • Schedule: ["at any time"]
  • Branch name: renovate/gopkg.in-yaml.v3-3.x
  • Merge into: main
  • Upgrade gopkg.in/yaml.v3 to f6f7691b1fdeb513f56608cd2c32c51f8194bf51
chore(deps): update actions/cache action to v3.3.3
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-cache-3.x
  • Merge into: main
  • Upgrade actions/cache to e12d46a63a90f2fae62d114769bbf2a179198b5c
chore(deps): update gcr.io/projectsigstore/cosign docker tag to v1.13.6
  • Schedule: ["at any time"]
  • Branch name: renovate/gcr.io-projectsigstore-cosign-1.x
  • Merge into: main
  • Upgrade gcr.io/projectsigstore/cosign to sha256:366bf5a7e882e9748e2b05f620258f8eab89ef4e3597001279291a88486c4fdf
chore(deps): update module github.com/containerd/containerd to v1.7.23
chore(deps): update module github.com/denis-tingaikin/go-header to v0.5.0
chore(deps): update sigstore/cosign-installer action to v2.8.1
  • Schedule: ["at any time"]
  • Branch name: renovate/sigstore-cosign-installer-2.x
  • Merge into: main
  • Upgrade sigstore/cosign-installer to c85d0e205a72a294fe064f618a87dbac13084086
chore(deps): update styfle/cancel-workflow-action action to v0.12.1
  • Schedule: ["at any time"]
  • Branch name: renovate/styfle-cancel-workflow-action-0.x
  • Merge into: main
  • Upgrade styfle/cancel-workflow-action to 85880fa0301c86cca9da44039ee3bb12d3bedbfa
fix(deps): update module filippo.io/age to v1.2.0
  • Schedule: ["at any time"]
  • Branch name: renovate/filippo.io-age-1.x
  • Merge into: main
  • Upgrade filippo.io/age to v1.2.0
fix(deps): update module filippo.io/edwards25519 to v1.1.0
  • Schedule: ["at any time"]
  • Branch name: renovate/filippo.io-edwards25519-1.x
  • Merge into: main
  • Upgrade filippo.io/edwards25519 to v1.1.0
fix(deps): update module github.com/alessio/shellescape to v1.5.1
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-alessio-shellescape-1.x
  • Merge into: main
  • Upgrade github.com/alessio/shellescape to v1.5.1
fix(deps): update module github.com/cyclonedx/cyclonedx-gomod to v1.8.0
fix(deps): update module github.com/daixiang0/gci to v0.13.5
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-daixiang0-gci-0.x
  • Merge into: main
  • Upgrade github.com/daixiang0/gci to v0.13.5
fix(deps): update module github.com/elastic/harp to v0.2.11
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-elastic-harp-0.x
  • Merge into: main
  • Upgrade github.com/elastic/harp to 186f3992524041fb00bcaa75aa8ea25d9cc6f3ab
fix(deps): update module github.com/fatih/color to v1.17.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-fatih-color-1.x
  • Merge into: main
  • Upgrade github.com/fatih/color to v1.17.0
fix(deps): update module github.com/golangci/golangci-lint to v1.61.0
fix(deps): update module github.com/google/cel-go to v0.21.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-google-cel-go-0.x
  • Merge into: main
  • Upgrade github.com/google/cel-go to v0.21.0
fix(deps): update module github.com/google/go-cmp to v0.6.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-google-go-cmp-0.x
  • Merge into: main
  • Upgrade github.com/google/go-cmp to v0.6.0
fix(deps): update module github.com/google/wire to v0.6.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-google-wire-0.x
  • Merge into: main
  • Upgrade github.com/google/wire to v0.6.0
fix(deps): update module github.com/gosimple/slug to v1.14.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-gosimple-slug-1.x
  • Merge into: main
  • Upgrade github.com/gosimple/slug to v1.14.0
fix(deps): update module github.com/hashicorp/consul/api to v1.29.5
fix(deps): update module github.com/hashicorp/hcl/v2 to v2.22.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-hashicorp-hcl-v2-2.x
  • Merge into: main
  • Upgrade github.com/hashicorp/hcl/v2 to v2.22.0
fix(deps): update module github.com/hashicorp/vault/api to v1.15.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-hashicorp-vault-api-1.x
  • Merge into: main
  • Upgrade github.com/hashicorp/vault/api to v1.15.0
fix(deps): update module github.com/iancoleman/strcase to v0.3.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-iancoleman-strcase-0.x
  • Merge into: main
  • Upgrade github.com/iancoleman/strcase to v0.3.0
fix(deps): update module github.com/klauspost/compress to v1.17.11
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-klauspost-compress-1.x
  • Merge into: main
  • Upgrade github.com/klauspost/compress to v1.17.11
fix(deps): update module github.com/magefile/mage to v1.15.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-magefile-mage-1.x
  • Merge into: main
  • Upgrade github.com/magefile/mage to v1.15.0
fix(deps): update module github.com/masterminds/semver/v3 to v3.3.0
fix(deps): update module github.com/masterminds/sprig/v3 to v3.3.0
fix(deps): update module github.com/open-policy-agent/opa to v0.69.0
fix(deps): update module github.com/opencontainers/image-spec to v1.1.0
fix(deps): update module github.com/ory/dockertest/v3 to v3.11.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-ory-dockertest-v3-3.x
  • Merge into: main
  • Upgrade github.com/ory/dockertest/v3 to v3.11.0
fix(deps): update module github.com/sethvargo/go-diceware to v0.4.0
fix(deps): update module github.com/sethvargo/go-password to v0.3.1
fix(deps): update module github.com/spf13/cobra to v1.8.1
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-spf13-cobra-1.x
  • Merge into: main
  • Upgrade github.com/spf13/cobra to v1.8.1
fix(deps): update module github.com/spf13/viper to v1.19.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-spf13-viper-1.x
  • Merge into: main
  • Upgrade github.com/spf13/viper to v1.19.0
fix(deps): update module github.com/stretchr/testify to v1.9.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-stretchr-testify-1.x
  • Merge into: main
  • Upgrade github.com/stretchr/testify to v1.9.0
fix(deps): update module github.com/zclconf/go-cty to v1.15.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-zclconf-go-cty-1.x
  • Merge into: main
  • Upgrade github.com/zclconf/go-cty to v1.15.0
fix(deps): update module go.step.sm/crypto to v0.54.0
  • Schedule: ["at any time"]
  • Branch name: renovate/go.step.sm-crypto-0.x
  • Merge into: main
  • Upgrade go.step.sm/crypto to v0.54.0
fix(deps): update module go.uber.org/zap to v1.27.0
  • Schedule: ["at any time"]
  • Branch name: renovate/go.uber.org-zap-1.x
  • Merge into: main
  • Upgrade go.uber.org/zap to v1.27.0
fix(deps): update module golang.org/x/crypto to v0.28.0
  • Schedule: ["at any time"]
  • Branch name: renovate/golang.org-x-crypto-0.x
  • Merge into: main
  • Upgrade golang.org/x/crypto to adef4cc1a8c2ca4da1b1f4e6c976b59ca22dbfb8
fix(deps): update module golang.org/x/oauth2 to v0.23.0
  • Schedule: ["at any time"]
  • Branch name: renovate/golang.org-x-oauth2-0.x
  • Merge into: main
  • Upgrade golang.org/x/oauth2 to 3e6480915d39dd1a80fa460e56413857f02cc1b9
fix(deps): update module golang.org/x/sync to v0.8.0
  • Schedule: ["at any time"]
  • Branch name: renovate/golang.org-x-sync-0.x
  • Merge into: main
  • Upgrade golang.org/x/sync to 411f99ef121375a146e962b6eab78b03b7429483
fix(deps): update module golang.org/x/sys to v0.26.0
  • Schedule: ["at any time"]
  • Branch name: renovate/golang.org-x-sys-0.x
  • Merge into: main
  • Upgrade golang.org/x/sys to 23b0dabe630b463b28ffc2871505befb3c5d3b4b
fix(deps): update module golang.org/x/term to v0.25.0
  • Schedule: ["at any time"]
  • Branch name: renovate/golang.org-x-term-0.x
  • Merge into: main
  • Upgrade golang.org/x/term to 9d5441ab55ca2ec4afd8611a45a4bb5c5a957d32
fix(deps): update module google.golang.org/grpc to v1.67.1
  • Schedule: ["at any time"]
  • Branch name: renovate/google.golang.org-grpc-1.x
  • Merge into: main
  • Upgrade google.golang.org/grpc to v1.67.1
fix(deps): update module google.golang.org/grpc/cmd/protoc-gen-go-grpc to v1.5.1
fix(deps): update module google.golang.org/protobuf to v1.35.1
  • Schedule: ["at any time"]
  • Branch name: renovate/google.golang.org-protobuf-1.x
  • Merge into: main
  • Upgrade google.golang.org/protobuf to v1.35.1
fix(deps): update module gotest.tools/gotestsum to v1.12.0
  • Schedule: ["at any time"]
  • Branch name: renovate/gotest.tools-gotestsum-1.x
  • Merge into: main
  • Upgrade gotest.tools/gotestsum to v1.12.0
fix(deps): update module mvdan.cc/gofumpt to v0.7.0
  • Schedule: ["at any time"]
  • Branch name: renovate/mvdan.cc-gofumpt-0.x
  • Merge into: main
  • Upgrade mvdan.cc/gofumpt to v0.7.0
fix(deps): update module oras.land/oras-go to v1.2.6
  • Schedule: ["at any time"]
  • Branch name: renovate/oras.land-oras-go-1.x
  • Merge into: main
  • Upgrade oras.land/oras-go to v1.2.6
fix(deps): update module sigs.k8s.io/yaml to v1.4.0
  • Schedule: ["at any time"]
  • Branch name: renovate/sigs.k8s.io-yaml-1.x
  • Merge into: main
  • Upgrade sigs.k8s.io/yaml to v1.4.0
fix(deps): update module zntr.io/paseto to v1.3.0
  • Schedule: ["at any time"]
  • Branch name: renovate/zntr.io-paseto-1.x
  • Merge into: main
  • Upgrade zntr.io/paseto to v1.3.0
chore(deps): update abutler/upload-release-assets action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/abutler-upload-release-assets-3.x
  • Merge into: main
  • Upgrade AButler/upload-release-assets to 3d6774fae0ed91407dc5ae29d576b166536d1777
chore(deps): update actions/cache action to v4
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-cache-4.x
  • Merge into: main
  • Upgrade actions/cache to 3624ceb22c1c5a301c8db4169662070a689d9ea8
chore(deps): update actions/checkout action to v4
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-checkout-4.x
  • Merge into: main
  • Upgrade actions/checkout to eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
chore(deps): update actions/setup-go action to v5
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-setup-go-5.x
  • Merge into: main
  • Upgrade actions/setup-go to 0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
chore(deps): update apple-actions/import-codesign-certs action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/apple-actions-import-codesign-certs-3.x
  • Merge into: main
  • Upgrade Apple-Actions/import-codesign-certs to 63fff01cd422d4b7b855d40ca1e9d34d2de9427d
chore(deps): update autero1/action-gotestsum action to v2
  • Schedule: ["at any time"]
  • Branch name: renovate/autero1-action-gotestsum-2.x
  • Merge into: main
  • Upgrade autero1/action-gotestsum to 7263b9d73912eec65f46337689e59fac865c425f
chore(deps): update docker/build-push-action action to v6
  • Schedule: ["at any time"]
  • Branch name: renovate/docker-build-push-action-6.x
  • Merge into: main
  • Upgrade docker/build-push-action to 4f58ea79222b3b9dc2c8bbdd6debcef730109a75
chore(deps): update docker/login-action action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/docker-login-action-3.x
  • Merge into: main
  • Upgrade docker/login-action to 9780b0c442fbb1117ed29e0efdff1e18412f7567
chore(deps): update docker/metadata-action action to v5
  • Schedule: ["at any time"]
  • Branch name: renovate/docker-metadata-action-5.x
  • Merge into: main
  • Upgrade docker/metadata-action to 8e5442c4ef9f78752691e2d8f8d19755c6f78e81
chore(deps): update docker/setup-buildx-action action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/docker-setup-buildx-action-3.x
  • Merge into: main
  • Upgrade docker/setup-buildx-action to c47758b77c9736f4b2ef4073d4d51994fabfe349
chore(deps): update docker/setup-qemu-action action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/docker-setup-qemu-action-3.x
  • Merge into: main
  • Upgrade docker/setup-qemu-action to 49b3bc8e6bdd4a60e6116a5414239cba5943d3cf
chore(deps): update gcr.io/projectsigstore/cosign docker tag to v2
  • Schedule: ["at any time"]
  • Branch name: renovate/gcr.io-projectsigstore-cosign-2.x
  • Merge into: main
  • Upgrade gcr.io/projectsigstore/cosign to sha256:b03690aa52bfe94054187142fba24dc54137650682810633901767d8a3e15b31
chore(deps): update github/codeql-action action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/github-codeql-action-3.x
  • Merge into: main
  • Upgrade github/codeql-action to f779452ac5af1c261dce0346a8f964149f49322b
chore(deps): update golangci/golangci-lint-action action to v6
  • Schedule: ["at any time"]
  • Branch name: renovate/golangci-golangci-lint-action-6.x
  • Merge into: main
  • Upgrade golangci/golangci-lint-action to 971e284b6050e8a5849b72094c50ab08da042db8
chore(deps): update goreleaser/goreleaser-action action to v6
  • Schedule: ["at any time"]
  • Branch name: renovate/goreleaser-goreleaser-action-6.x
  • Merge into: main
  • Upgrade goreleaser/goreleaser-action to 286f3b13b1b49da4ac219696163fb8c1c93e1200
chore(deps): update sigstore/cosign-installer action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/sigstore-cosign-installer-3.x
  • Merge into: main
  • Upgrade sigstore/cosign-installer to dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
fix(deps): update module github.com/dchest/uniuri to v1
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-dchest-uniuri-1.x
  • Merge into: main
  • Upgrade github.com/dchest/uniuri to a87ec9dce6c59d337a52ec5d0046f2144935a8b7
fix(deps): update module github.com/google/go-github/v42 to v66
fix(deps): update module github.com/hashicorp/hcl to v2
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-hashicorp-hcl-2.x
  • Merge into: main
  • Upgrade github.com/hashicorp/hcl to v2.22.0
fix(deps): update module github.com/imdario/mergo to v1
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-imdario-mergo-1.x
  • Merge into: main
  • Upgrade github.com/imdario/mergo to v1.0.1
fix(deps): update module github.com/pelletier/go-toml to v2
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-pelletier-go-toml-2.x
  • Merge into: main
  • Upgrade github.com/pelletier/go-toml to v2.2.3
fix(deps): update module github.com/sebdah/goldie to v2
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-sebdah-goldie-2.x
  • Merge into: main
  • Upgrade github.com/sebdah/goldie to v2.5.5
fix(deps): update module oras.land/oras-go to v2
  • Schedule: ["at any time"]
  • Branch name: renovate/oras.land-oras-go-2.x
  • Merge into: main
  • Upgrade oras.land/oras-go to v2.5.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR has been generated by Renovate Bot.

@nuugen nuugen closed this Oct 16, 2024
@nuugen
Copy link
Member

nuugen commented Oct 16, 2024

Closing stale Renovate Onboarding PR (unmerged since creation >30 days ago).

@elastic-renovate-prod
Copy link
Author

Renovate is disabled

Renovate is disabled because there is no Renovate configuration file. To enable Renovate, you can either (a) change this PR's title to get a new onboarding PR, and merge the new onboarding PR, or (b) create a Renovate config file, and commit that file to your base branch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant