Configure Renovate

[renovate-bot]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• Dockerfile (dockerfile)
• .github/workflows/test.yaml (github-actions)
• go.mod (gomod)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 25 Pull Requests:

Update module google.golang.org/grpc to v1.56.3 [SECURITY]

• Branch name: renovate/go-google.golang.org/grpc-vulnerability
• Merge into: main
• Upgrade google.golang.org/grpc to v1.56.3

Update module github.com/sigstore/cosign/v2 to v2.2.4 [SECURITY]

• Branch name: renovate/go-github.com/sigstore/cosign/v2-vulnerability
• Merge into: main
• Upgrade github.com/sigstore/cosign/v2 to v2.2.4

Update module golang.org/x/net to v0.23.0 [SECURITY]

• Branch name: renovate/go-golang.org/x/net-vulnerability
• Merge into: main
• Upgrade golang.org/x/net to v0.23.0

Update module google.golang.org/protobuf to v1.33.0 [SECURITY]

• Branch name: renovate/go-google.golang.org/protobuf-vulnerability
• Merge into: main
• Upgrade google.golang.org/protobuf to v1.33.0

Update aquasecurity/trivy-action digest to 841fb37

• Schedule: ["at any time"]
• Branch name: renovate/aquasecurity-trivy-action-digest
• Merge into: main
• Upgrade aquasecurity/trivy-action to 841fb371db7b5cd339e5b2d55c92f5dbd730ac9f

Update google.golang.org/genproto digest to ef581f9

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-genproto-digest
• Merge into: main
• Upgrade google.golang.org/genproto to ef581f913117

Update karancode/yamllint-github-action digest to 0a90406

• Schedule: ["at any time"]
• Branch name: renovate/karancode-yamllint-github-action-digest
• Merge into: main
• Upgrade karancode/yamllint-github-action to 0a904064817924fc6fb449a32f67f25bfacc48ae

Update actions/cache action to v3.3.3

• Schedule: ["at any time"]
• Branch name: renovate/actions-cache-3.x
• Merge into: main
• Upgrade actions/cache to e12d46a63a90f2fae62d114769bbf2a179198b5c

Update codecov/codecov-action action to v3.1.6

• Schedule: ["at any time"]
• Branch name: renovate/codecov-codecov-action-3.x
• Merge into: main
• Upgrade codecov/codecov-action to ab904c41d6ece82784817410c45d8b8c02684457

Update actions/checkout action to v3.6.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-3.x
• Merge into: main
• Upgrade actions/checkout to f43a0e5ff2bd294095638e18286ca9a3d1956744

Update actions/setup-go action to v4.1.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-4.x
• Merge into: main
• Upgrade actions/setup-go to 93397bea11091df50f3d7e59dc26a7711a8bcfbe

Update alpine Docker tag to v3.20.0

• Schedule: ["at any time"]
• Branch name: renovate/alpine-3.x
• Merge into: main
• Upgrade alpine to 3.20.0

Update golang Docker tag to v1.22.4

• Schedule: ["at any time"]
• Branch name: renovate/golang-1.x
• Merge into: main
• Upgrade golang to 1.22.4

Update module cloud.google.com/go/containeranalysis to v0.11.6

• Schedule: ["at any time"]
• Branch name: renovate/cloud.google.com-go-containeranalysis-0.x
• Merge into: main
• Upgrade cloud.google.com/go/containeranalysis to v0.11.6

Update module github.com/google/go-containerregistry to v0.19.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-google-go-containerregistry-0.x
• Merge into: main
• Upgrade github.com/google/go-containerregistry to v0.19.1

Update module github.com/rs/zerolog to v1.33.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-rs-zerolog-1.x
• Merge into: main
• Upgrade github.com/rs/zerolog to v1.33.0

Update module github.com/secure-systems-lab/go-securesystemslib to v0.8.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-secure-systems-lab-go-securesystemslib-0.x
• Merge into: main
• Upgrade github.com/secure-systems-lab/go-securesystemslib to v0.8.0

Update module github.com/stretchr/testify to v1.9.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-stretchr-testify-1.x
• Merge into: main
• Upgrade github.com/stretchr/testify to v1.9.0

Update module github.com/urfave/cli/v2 to v2.27.2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-urfave-cli-v2-2.x
• Merge into: main
• Upgrade github.com/urfave/cli/v2 to v2.27.2

Update module google.golang.org/api to v0.183.0

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-api-0.x
• Merge into: main
• Upgrade google.golang.org/api to v0.183.0

Update actions/cache action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-cache-4.x
• Merge into: main
• Upgrade actions/cache to 0c45773b623bea8c8e75f6c82b208c3cf94ea4f9

Update actions/checkout action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: main
• Upgrade actions/checkout to a5ac7e51b41094c92402da3b24376905380afc29

Update actions/setup-go action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-5.x
• Merge into: main
• Upgrade actions/setup-go to cdcb36043654635271a94b9a6d1392de5bb323a7
• Upgrade actions/setup-go to v5

Update codecov/codecov-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/codecov-codecov-action-4.x
• Merge into: main
• Upgrade codecov/codecov-action to 125fc84a9a348dbcf27191600683ec096ec9021c

Update golangci/golangci-lint-action action to v6

• Schedule: ["at any time"]
• Branch name: renovate/golangci-golangci-lint-action-6.x
• Merge into: main
• Upgrade golangci/golangci-lint-action to v6

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Could not determine new digest for update (github-tags package andstor/file-existence-action)

Files affected: .github/workflows/test.yaml

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Mend Renovate. View repository job log here.