Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• .circleci/config.yml (circleci)
• .github/workflows/stale.yml (github-actions)
• incubator/ro-cert-manager/requirements.yaml (helm-requirements)
• incubator/timescale/requirements.yaml (helm-requirements)
• incubator/autospotting/values.yaml (helm-values)
• incubator/basic-demo/values.yaml (helm-values)
• incubator/capsize/values.yaml (helm-values)
• incubator/custom-iptables/values.yaml (helm-values)
• incubator/datadog-apm/values.yaml (helm-values)
• incubator/fairwinds-metrics/values.yaml (helm-values)
• incubator/fluentd/values.yaml (helm-values)
• incubator/github-prometheus-exporter/values.yaml (helm-values)
• incubator/kubebench/values.yaml (helm-values)
• incubator/load-generator/values.yaml (helm-values)
• incubator/logentries/values.yaml (helm-values)
• incubator/oom-event-generator/values.yaml (helm-values)
• incubator/opa/values.yaml (helm-values)
• incubator/route53sync/values.yaml (helm-values)
• incubator/skopeo-sync/values.yaml (helm-values)
• incubator/stackdriver-metrics-adapter/values.yaml (helm-values)
• incubator/timescale/values.yaml (helm-values)
• incubator/vault-token-injector/values.yaml (helm-values)
• incubator/yelb/values.yaml (helm-values)
• stable/astro/values.yaml (helm-values)
• stable/aws-iam-authenticator/values.yaml (helm-values)
• stable/ecr-cleanup/values.yaml (helm-values)
• stable/fairwinds-insights/values.yaml (helm-values)
• stable/gemini/values.yaml (helm-values)
• stable/gke-node-termination-handler/values.yaml (helm-values)
• stable/goldilocks/values.yaml (helm-values)
• stable/helm-release-pruner/values.yaml (helm-values)
• stable/insights-admission/values.yaml (helm-values)
• stable/insights-agent/values.yaml (helm-values)
• stable/polaris/values.yaml (helm-values)
• stable/rbac-manager/values.yaml (helm-values)
• stable/vpa/values.yaml (helm-values)
• incubator/yelb/Chart.yaml (helmv3)
• stable/fairwinds-insights/Chart.yaml (helmv3)
• stable/goldilocks/Chart.yaml (helmv3)
• stable/insights-agent/Chart.yaml (helmv3)
• stable/vpa/Chart.yaml (helmv3)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs

---

What to Expect

With your current configuration, Renovate will create 38 Pull Requests:

Pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/pin-dependencies
• Merge into: master
• Pin rok8s to 14.4.0

Update aquasec/kube-bench Docker tag to v0.15.6

• Schedule: ["at any time"]
• Branch name: renovate/aquasec-kube-bench-0.x
• Merge into: master
• Upgrade aquasec/kube-bench to v0.15.6

Update danielfm/kube-ecr-cleanup-controller Docker tag to v0.1.10

• Schedule: ["at any time"]
• Branch name: renovate/danielfm-kube-ecr-cleanup-controller-0.x
• Merge into: master
• Upgrade danielfm/kube-ecr-cleanup-controller to 0.1.10

Update Helm release dcgm-exporter to v4.8.2

• Schedule: ["at any time"]
• Branch name: renovate/dcgm-exporter-4.x
• Merge into: master
• Upgrade dcgm-exporter to 1c5535c03ebab3f021444df6016fce1cd7871385122e115c6ed24c804b623803

Update postgresql Docker tag to v15.5.38

• Schedule: ["at any time"]
• Branch name: renovate/postgresql-15.x
• Merge into: master
• Upgrade postgresql to 15.5.38

Update swaggerapi/swagger-ui Docker tag to v5.32.6

• Schedule: ["at any time"]
• Branch name: renovate/swaggerapi-swagger-ui-5.x
• Merge into: master
• Upgrade swaggerapi/swagger-ui to v5.32.6

Update valkey Docker tag to v0.3.17

• Schedule: ["at any time"]
• Branch name: renovate/valkey-0.x
• Merge into: master
• Upgrade valkey to 0.3.17

Update alpine/kubectl Docker tag to v1.36.1

• Schedule: ["at any time"]
• Branch name: renovate/alpine-kubectl-1.x
• Merge into: master
• Upgrade alpine/kubectl to 1.36.1

Update curlimages/curl Docker tag to v7.88.1

• Schedule: ["at any time"]
• Branch name: renovate/curlimages-curl-7.x
• Merge into: master
• Upgrade curlimages/curl to 7.88.1

Update gcr.io/gke-release/custom-metrics-stackdriver-adapter Docker tag to v0.16.7

• Schedule: ["at any time"]
• Branch name: renovate/gcr.io-gke-release-custom-metrics-stackdriver-adapter-0.x
• Merge into: master
• Upgrade gcr.io/gke-release/custom-metrics-stackdriver-adapter to v0.16.7-gke.0

Update Helm release cert-manager to v0.16.1

• Schedule: ["at any time"]
• Branch name: renovate/cert-manager-0.x
• Merge into: master
• Upgrade cert-manager to 690a2c066fd823e39115b46568ac1c24c5fd46d290fead4c2572636b45d260f3

Update Helm release device-metrics-exporter-charts to v1.5.0

• Schedule: ["at any time"]
• Branch name: renovate/device-metrics-exporter-charts-1.x
• Merge into: master
• Upgrade device-metrics-exporter-charts to 26cbb4b55d5b9d8aa1c3bdc1516880bd762300d9293da1125e3f556344c81c31

Update Helm release insights-admission to 1.12.*

• Schedule: ["at any time"]
• Branch name: renovate/insights-admission-1.x
• Merge into: master
• Upgrade insights-admission to df0cd46d343fc5e847569170c50d67aa4240fb96d05e8042a353c5df231b80cd

Update Helm release metrics-server to v3.13.0

• Schedule: ["at any time"]
• Branch name: renovate/metrics-server-3.x
• Merge into: master
• Upgrade metrics-server to fb929902e3b7565663cdd1734f31d63735c932be1541a7228b5aeef6d2348a1f

Update Helm release prometheus to 28.16.*

• Schedule: ["at any time"]
• Branch name: renovate/prometheus-28.x
• Merge into: master
• Upgrade prometheus to 03df1aab5a43f2be329986fe795efd0ac80dfeafc39546e7bd42774147ebf851

Update Helm release rustfs to v0.7.0

• Schedule: ["at any time"]
• Branch name: renovate/rustfs-0.x
• Merge into: master
• Upgrade rustfs to 97dda93fa7f6e8e5d6d83cdd45639ad76be0036a2b15e2d578c4e1568878526c

Update Helm release trivy to v0.23.0

• Schedule: ["at any time"]
• Branch name: renovate/trivy-0.x
• Merge into: master
• Upgrade trivy to 4934e068280a43b2b1452daab24c1ab1577fa78fe5e2bd2e53af091df790944b

Update Helm release vpa to 4.11.*

• Schedule: ["at any time"]
• Branch name: renovate/vpa-4.x
• Merge into: master
• Upgrade vpa to 26f01761bd74f8a3d840017526e13866ec82e2d05148146a3996fa50868e5b2f

Update koalaman/shellcheck-alpine Docker tag to v0.11.0

• Schedule: ["at any time"]
• Branch name: renovate/koalaman-shellcheck-alpine-0.x
• Merge into: master
• Upgrade koalaman/shellcheck-alpine to v0.11.0

Update loadimpact/k6 Docker tag to v0.48.0

• Schedule: ["at any time"]
• Branch name: renovate/loadimpact-k6-0.x
• Merge into: master
• Upgrade loadimpact/k6 to 0.48.0

Update openpolicyagent/kube-mgmt Docker tag to v0.13

• Schedule: ["at any time"]
• Branch name: renovate/openpolicyagent-kube-mgmt-0.x
• Merge into: master
• Upgrade openpolicyagent/kube-mgmt to 0.13

Update openpolicyagent/opa Docker tag to v0.70.0

• Schedule: ["at any time"]
• Branch name: renovate/openpolicyagent-opa-0.x
• Merge into: master
• Upgrade openpolicyagent/opa to 0.70.0

Update python Docker tag

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: master
• Upgrade python to 3.14-alpine
• Upgrade python to 3.14.5-alpine3.23

Update quay.io/fairwinds/astro Docker tag to v1.6.0

• Schedule: ["at any time"]
• Branch name: renovate/quay.io-fairwinds-astro-1.x
• Merge into: master
• Upgrade quay.io/fairwinds/astro to v1.6.0

Update quay.io/fairwinds/cloud-costs Docker tag to v1.1

• Schedule: ["at any time"]
• Branch name: renovate/quay.io-fairwinds-cloud-costs-1.x
• Merge into: master
• Upgrade quay.io/fairwinds/cloud-costs to 1.1

Update quay.io/fairwinds/kyverno Docker tag to v0.6

• Schedule: ["at any time"]
• Branch name: renovate/quay.io-fairwinds-kyverno-0.x
• Merge into: master
• Upgrade quay.io/fairwinds/kyverno to 0.6

Update quay.io/prometheuscommunity/postgres-exporter Docker tag to v0.19.1

• Schedule: ["at any time"]
• Branch name: renovate/quay.io-prometheuscommunity-postgres-exporter-0.x
• Merge into: master
• Upgrade quay.io/prometheuscommunity/postgres-exporter to v0.19.1

Update us-docker.pkg.dev/fairwinds-ops/oss/goldilocks Docker tag to v4.15.1

• Schedule: ["at any time"]
• Branch name: renovate/us-docker.pkg.dev-fairwinds-ops-oss-goldilocks-4.x
• Merge into: master
• Upgrade us-docker.pkg.dev/fairwinds-ops/oss/goldilocks to v4.15.1

Update us-docker.pkg.dev/fairwinds-ops/oss/pluto Docker tag to v5.23

• Schedule: ["at any time"]
• Branch name: renovate/us-docker.pkg.dev-fairwinds-ops-oss-pluto-5.x
• Merge into: master
• Upgrade us-docker.pkg.dev/fairwinds-ops/oss/pluto to v5.23

Update actions/stale action to v10

• Schedule: ["at any time"]
• Branch name: renovate/actions-stale-10.x
• Merge into: master
• Upgrade actions/stale to v10

Update curlimages/curl Docker tag to v8

• Schedule: ["at any time"]
• Branch name: renovate/curlimages-curl-8.x
• Merge into: master
• Upgrade curlimages/curl to 8.20.0

Update dependency rok8s to v15

• Schedule: ["at any time"]
• Branch name: renovate/rok8s-15.x
• Merge into: master
• Upgrade rok8s to 15

Update Helm release cert-manager to v1

• Schedule: ["at any time"]
• Branch name: renovate/cert-manager-1.x
• Merge into: master
• Upgrade cert-manager to d2a50bd44a09d838c2576a8f3dfca1524597c7393cf8d82ab3ec8a465b9eeb79

Update Helm release falco to v9

• Schedule: ["at any time"]
• Branch name: renovate/falco-9.x
• Merge into: master
• Upgrade falco to 093cb7f5af6e6e7f8e910dd34b6e3ca1887f2047aa9c25cbdcea0063fe04af30

Update Helm release prometheus to v29

• Schedule: ["at any time"]
• Branch name: renovate/prometheus-29.x
• Merge into: master
• Upgrade prometheus to 1a22980e094ce434f2fd419ad582f0f3e7dfd88229c8f99cb82245ab5445c476

Update openpolicyagent/opa Docker tag to v1

• Schedule: ["at any time"]
• Branch name: renovate/openpolicyagent-opa-1.x
• Merge into: master
• Upgrade openpolicyagent/opa to 1.17.0

Update postgresql Docker tag to v18

• Schedule: ["at any time"]
• Branch name: renovate/postgresql-18.x
• Merge into: master
• Upgrade postgresql to 18.7.0

Update valkey Docker tag to v6

• Schedule: ["at any time"]
• Branch name: renovate/valkey-6.x
• Merge into: master
• Upgrade valkey to 6.1.0

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up docker package quay.io/reactiveops/kubebench-exporter: no-result
• Failed to look up docker package 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon/aws-iam-authenticator: no-result
• Could not determine new digest for update (docker package k8s.gcr.io/gke-node-termination-handler)

Files affected: incubator/kubebench/values.yaml, stable/aws-iam-authenticator/values.yaml, stable/gke-node-termination-handler/values.yaml

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[fairwinds-insights]

Fairwinds Insights - Auto-scan job has failed ❌

View the full report at insights.fairwinds.com.

Show Logs

found 1 pods for job repo-scan-job-98526
------------------------------------------------
unable to retrieve container logs
Additional info: Repository scan has reached the specified backoff limit; Repository scan has reached the specified backoff limit