chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• Dockerfile (dockerfile)
• Dockerfile.standalone (dockerfile)
• .github/workflows/PRBuild.yaml (github-actions)
• .github/workflows/REUSE.yaml (github-actions)
• .github/workflows/Release.yaml (github-actions)
• .github/workflows/codegen-check.yaml (github-actions)
• .github/workflows/golangci-lint.yaml (github-actions)
• .github/workflows/scorecard.yml (github-actions)
• .github/workflows/stale.yml (github-actions)
• go.mod (gomod)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs

---

What to Expect

With your current configuration, Renovate will create 20 Pull Requests:

fix(deps): update module github.com/go-chi/chi/v5 to v5.2.4 [security]

• Branch name: renovate/go-github.com-go-chi-chi-v5-vulnerability
• Merge into: main
• Upgrade github.com/go-chi/chi/v5 to v5.2.4

chore(deps): update actions/checkout action to v6.0.3

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to df4cb1c069e1874edd31b4311f1884172cec0e10
• Upgrade actions/checkout to v6.0.3

chore(deps): update actions/upload-artifact action to v4.6.2

• Schedule: ["at any time"]
• Branch name: renovate/actions-upload-artifact-4.x
• Merge into: main
• Upgrade actions/upload-artifact to ea165f8d65b6e75b540449e92b4886f43607fa02

chore(deps): update ossf/scorecard-action action to v2.4.3

• Schedule: ["at any time"]
• Branch name: renovate/ossf-scorecard-action-2.x
• Merge into: main
• Upgrade ossf/scorecard-action to 4eaacf0543bb3f2c246792bd56e8cdeffafb205a

fix(deps): update module github.com/golang-jwt/jwt/v5 to v5.3.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-golang-jwt-jwt-v5-5.x
• Merge into: main
• Upgrade github.com/golang-jwt/jwt/v5 to v5.3.1

fix(deps): update module github.com/openchami/tokensmith to v0.4.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-openchami-tokensmith-0.x
• Merge into: main
• Upgrade github.com/openchami/tokensmith to v0.4.1

chore(deps): update actions/setup-go action to v6.5.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-6.x
• Merge into: main
• Upgrade actions/setup-go to v6.5.0

chore(deps): update docker/dockerfile docker tag to v1.25

• Schedule: ["at any time"]
• Branch name: renovate/docker-dockerfile-1.x
• Merge into: main
• Upgrade docker/dockerfile to 1.25-labs

chore(deps): update golangci/golangci-lint-action action to v9.3.0

• Schedule: ["at any time"]
• Branch name: renovate/golangci-golangci-lint-action-9.x
• Merge into: main
• Upgrade golangci/golangci-lint-action to v9.3.0

fix(deps): update module github.com/getkin/kin-openapi to v0.140.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-getkin-kin-openapi-0.x
• Merge into: main
• Upgrade github.com/getkin/kin-openapi to v0.140.0

fix(deps): update module github.com/rs/zerolog to v1.35.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-rs-zerolog-1.x
• Merge into: main
• Upgrade github.com/rs/zerolog to v1.35.1

chore(deps): update actions/attest-build-provenance action to v4.1.1

• Schedule: ["at any time"]
• Branch name: renovate/actions-attest-build-provenance-4.x
• Merge into: main
• Upgrade actions/attest-build-provenance to v4
• Upgrade actions/attest-build-provenance to v4.1.1

chore(deps): update actions/checkout action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-7.x
• Merge into: main
• Upgrade actions/checkout to 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• Upgrade actions/checkout to v7.0.0

chore(deps): update actions/stale action to v10

• Schedule: ["at any time"]
• Branch name: renovate/actions-stale-10.x
• Merge into: main
• Upgrade actions/stale to v10

chore(deps): update actions/upload-artifact action to v7

• Schedule: ["at any time"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: main
• Upgrade actions/upload-artifact to 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

chore(deps): update docker/login-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/docker-login-action-4.x
• Merge into: main
• Upgrade docker/login-action to v4

chore(deps): update docker/setup-buildx-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/docker-setup-buildx-action-4.x
• Merge into: main
• Upgrade docker/setup-buildx-action to v4

chore(deps): update docker/setup-qemu-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/docker-setup-qemu-action-4.x
• Merge into: main
• Upgrade docker/setup-qemu-action to v4

chore(deps): update github/codeql-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-4.x
• Merge into: main
• Upgrade github/codeql-action to v4

chore(deps): update goreleaser/goreleaser-action action to v7

• Schedule: ["at any time"]
• Branch name: renovate/goreleaser-goreleaser-action-7.x
• Merge into: main
• Upgrade goreleaser/goreleaser-action to v7

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.