chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/default.yaml (github-actions)
• go.mod (gomod)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Show OpenSSF badge on pull requests.
• Weekly schedule on early Monday mornings.
• Pin github-action digests.
• Pin Docker digests.
• Run lock file maintenance (updates) early Monday mornings.
• Run Renovate on following schedule: before 4am on Monday

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 8 Pull Requests:

chore(deps): pin dependencies

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/pin-dependencies
• Merge into: main
• Upgrade actions/checkout to eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• Upgrade actions/setup-go to 93397bea11091df50f3d7e59dc26a7711a8bcfbe

fix(deps): update github.com/aquasecurity/go-dep-parser digest to 1de9a37

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/github.com-aquasecurity-go-dep-parser-digest
• Merge into: main
• Upgrade github.com/aquasecurity/go-dep-parser to 1de9a375c629

fix(deps): update golang.org/x/exp digest to f66d83c

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/golang.org-x-exp-digest
• Merge into: main
• Upgrade golang.org/x/exp to f66d83c29e7c

fix(deps): update golang.org/x/xerrors digest to 7835f81

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/golang.org-x-xerrors-digest
• Merge into: main
• Upgrade golang.org/x/xerrors to 7835f813f4da

fix(deps): update all non-major dependencies

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/all-minor-patch
• Merge into: main
• Upgrade github.com/aquasecurity/trivy to v0.56.2
• Upgrade github.com/containerd/containerd to v1.7.23
• Upgrade github.com/docker/docker to v26.1.5+incompatible
• Upgrade github.com/google/go-containerregistry to v0.20.2
• Upgrade github.com/knqyf263/go-rpmdb to facee9e1ddafec177b8e3159f61fb747c0762bdf
• Upgrade github.com/samber/lo to v1.47.0
• Upgrade go to 1.23.2
• Upgrade golang.org/x/sync to v0.8.0

chore(deps): update actions/setup-go action to v5

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/actions-setup-go-5.x
• Merge into: main
• Upgrade actions/setup-go to 0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

chore(deps): update dependency ubuntu to v24

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/ubuntu-24.x
• Merge into: main
• Upgrade ubuntu to 24.04

fix(deps): update module github.com/docker/docker to v27

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/github.com-docker-docker-27.x
• Merge into: main
• Upgrade github.com/docker/docker to v27.3.1+incompatible

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.