chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/ci.yml (github-actions)
• .github/workflows/codeql.yml (github-actions)
• .github/workflows/dotcom-acceptance-tests-all.yml (github-actions)
• .github/workflows/dotcom-acceptance-tests-manual.yml (github-actions)
• .github/workflows/dotcom-acceptance-tests.yml (github-actions)
• .github/workflows/ghes-acceptance-tests-all.yml (github-actions)
• .github/workflows/ghes-acceptance-tests.yml (github-actions)
• .github/workflows/immediate-response.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• .github/workflows/stale.yml (github-actions)
• .github/workflows/tagpr.yml (github-actions)
• go.mod (gomod)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 25 Pull Requests:

fix(deps): update github.com/shurcool/githubv4 digest to 4829585

• Schedule: ["at any time"]
• Branch name: renovate/github.com-shurcool-githubv4-digest
• Merge into: main
• Upgrade github.com/shurcooL/githubv4 to 48295856cce7

fix(deps): update module github.com/go-jose/go-jose/v3 to v3.0.4

• Schedule: ["at any time"]
• Branch name: renovate/github.com-go-jose-go-jose-v3-3.x
• Merge into: main
• Upgrade github.com/go-jose/go-jose/v3 to v3.0.4

chore(deps): update actions/checkout action to v4.3.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: main
• Upgrade actions/checkout to 08eba0b27e820071cde6df949e0beb9ba4906955

chore(deps): update actions/create-github-app-token action to v2.1.4

• Schedule: ["at any time"]
• Branch name: renovate/actions-create-github-app-token-2.x
• Merge into: main
• Upgrade actions/create-github-app-token to 67018539274d69449ef7c02e8e71183d1719ab42

chore(deps): update actions/setup-go action to v5.5.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-5.x
• Merge into: main
• Upgrade actions/setup-go to d35c59abb061a4a6fb18e82ac0862c26744d6ab5

chore(deps): update actions/stale action to v9.1.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-stale-9.x
• Merge into: main
• Upgrade actions/stale to 5bef64f19d7facfb25b37b414482c7164d639639

chore(deps): update crazy-max/ghaction-import-gpg action to v6.3.0

• Schedule: ["at any time"]
• Branch name: renovate/crazy-max-ghaction-import-gpg-6.x
• Merge into: main
• Upgrade crazy-max/ghaction-import-gpg to e89d40939c28e39f97cf32126055eeae86ba74ec

chore(deps): update dependency go to v1.25.3

• Schedule: ["at any time"]
• Branch name: renovate/go-1.x
• Merge into: main
• Upgrade go to 1.25.3

chore(deps): update github/codeql-action action to v3.30.8

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-3.x
• Merge into: main
• Upgrade github/codeql-action to 755f44910c12a3d7ca0d8c6e42c048b3362f7cec

chore(deps): update goreleaser/goreleaser-action action to v6.4.0

• Schedule: ["at any time"]
• Branch name: renovate/goreleaser-goreleaser-action-6.x
• Merge into: main
• Upgrade goreleaser/goreleaser-action to e435ccd777264be153ace6237001ef4d979d3a7a

chore(deps): update songmu/tagpr action to v1.9.0

• Schedule: ["at any time"]
• Branch name: renovate/songmu-tagpr-1.x
• Merge into: main
• Upgrade Songmu/tagpr to 7191605433b03e11b313dbbc0efb80185170de4b

fix(deps): update module github.com/golangci/golangci-lint to v1.64.8

• Schedule: ["at any time"]
• Branch name: renovate/github.com-golangci-golangci-lint-1.x
• Merge into: main
• Upgrade github.com/golangci/golangci-lint to v1.64.8

fix(deps): update module github.com/hashicorp/go-cty to v1.5.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-hashicorp-go-cty-1.x
• Merge into: main
• Upgrade github.com/hashicorp/go-cty to f09c45358875b0ff10a365d16b33eb399877064d

fix(deps): update module github.com/hashicorp/terraform-plugin-sdk/v2 to v2.38.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-hashicorp-terraform-plugin-sdk-v2-2.x
• Merge into: main
• Upgrade github.com/hashicorp/terraform-plugin-sdk/v2 to v2.38.1

fix(deps): update module github.com/stretchr/testify to v1.11.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-stretchr-testify-1.x
• Merge into: main
• Upgrade github.com/stretchr/testify to v1.11.1

fix(deps): update module golang.org/x/crypto to v0.43.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-crypto-0.x
• Merge into: main
• Upgrade golang.org/x/crypto to v0.43.0

fix(deps): update module golang.org/x/oauth2 to v0.32.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-oauth2-0.x
• Merge into: main
• Upgrade golang.org/x/oauth2 to v0.32.0

chore(deps): update actions/checkout action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-5.x
• Merge into: main
• Upgrade actions/checkout to 08c6903cd8c0fde910a37f88322edcfb5dd907a8

chore(deps): update actions/setup-go action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-6.x
• Merge into: main
• Upgrade actions/setup-go to 44694675825211faa026b3c33043df3e48a5fa00

chore(deps): update actions/stale action to v10

• Schedule: ["at any time"]
• Branch name: renovate/actions-stale-10.x
• Merge into: main
• Upgrade actions/stale to 5f858e3efba33a5ca4407a664cc011ad407f2008

chore(deps): update github/codeql-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-4.x
• Merge into: main
• Upgrade github/codeql-action to f443b600d91635bebf5b0d9ebc620189c0d6fba5

chore(deps): update peter-evans/create-or-update-comment action to v5

• Schedule: ["at any time"]
• Branch name: renovate/peter-evans-create-or-update-comment-5.x
• Merge into: main
• Upgrade peter-evans/create-or-update-comment to v5

fix(deps): update module github.com/go-jose/go-jose/v3 to v4

• Schedule: ["at any time"]
• Branch name: renovate/github.com-go-jose-go-jose-v3-4.x
• Merge into: main
• Upgrade github.com/go-jose/go-jose/v3 to v4.1.3

fix(deps): update module github.com/golangci/golangci-lint to v2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-golangci-golangci-lint-2.x
• Merge into: main
• Upgrade github.com/golangci/golangci-lint to v2.5.0

fix(deps): update module github.com/google/go-github/v66 to v76

• Schedule: ["at any time"]
• Branch name: renovate/github.com-google-go-github-v66-76.x
• Merge into: main
• Upgrade github.com/google/go-github/v66 to c93693f368562c43017f9bed3243195bee7d5b8d

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (1)

• auto-review

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}