Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• Dockerfile (dockerfile)
• testfiles/dockerfiles/input/Dockerfile-multiple-images (dockerfile)
• testfiles/dockerfiles/input/Dockerfile-not-pinned (dockerfile)
• testfiles/dockerfiles/input/Dockerfile-not-pinned-as (dockerfile)
• testfiles/dockerfiles/output/Dockerfile-multiple-images (dockerfile)
• testfiles/dockerfiles/output/Dockerfile-not-pinned (dockerfile)
• testfiles/dockerfiles/output/Dockerfile-not-pinned-as (dockerfile)
• .github/workflows/code-review.yml (github-actions)
• .github/workflows/codeql.yml (github-actions)
• .github/workflows/kb-test.yml (github-actions)
• .github/workflows/scorecards.yml (github-actions)
• workflow-templates/codeql.yml (github-actions)
• workflow-templates/dependency-review.yml (github-actions)
• workflow-templates/scorecards.yml (github-actions)
• go.mod (gomod)
• Automate-PR/package.json (npm)
• kbanalysis/package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.

---

What to Expect

With your current configuration, Renovate will create 33 Pull Requests:

Update dependency @​actions/core to v1.9.1 [SECURITY]

• Branch name: renovate/npm-@actions/core-vulnerability
• Merge into: main
• Upgrade @actions/core to 1.9.1

Update actions/checkout digest to f095bcc

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-digest
• Merge into: main
• Upgrade actions/checkout to f095bcc56b7c2baf48f3ac70d6d6782f4f553222

Update github/codeql-action digest to 926a489

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-digest
• Merge into: main
• Upgrade github/codeql-action to 926a4898bc8705cbb609517ff5086b235af7c1aa

Update golang:1.17 Docker digest to 55636cf

• Schedule: ["at any time"]
• Branch name: renovate/golang-1.17
• Merge into: main
• Upgrade golang to sha256:55636cf1983628109e569690596b85077f45aca810a77904e8afad48b49aa500

Update public.ecr.aws/lambda/provided:al2 Docker digest to 386586f

• Schedule: ["at any time"]
• Branch name: renovate/public.ecr.aws-lambda-provided-al2
• Merge into: main
• Upgrade public.ecr.aws/lambda/provided to sha256:386586f57c2323dc435290fe40d0b94f9ebee354a8aee9fd8c41c709b8267c3f

Update python Docker digest to 3a619e3

• Schedule: ["at any time"]
• Branch name: renovate/python
• Merge into: main
• Upgrade python to sha256:3a619e3c96fd4c5fc5e1998fd4dcb1f1403eb90c4c6409c70d7e80b9468df7df

Update python:3.7 Docker digest to d98fd1f

• Schedule: ["at any time"]
• Branch name: renovate/python-3.7
• Merge into: main
• Upgrade python to sha256:d98fd1fa8fd1756bfe883b5004a60cfc428a1ce6e575652b771b66c8db222478

Update actions/upload-artifact action to v3.1.2

• Schedule: ["at any time"]
• Branch name: renovate/actions-upload-artifact-3.x
• Merge into: main
• Upgrade actions/upload-artifact to 0b7f8abb1508181956e8e162db84b466c27e18ce

Update module gopkg.in/yaml.v3 to v3.0.1

• Schedule: ["at any time"]
• Branch name: renovate/gopkg.in-yaml.v3-3.x
• Merge into: main
• Upgrade gopkg.in/yaml.v3 to f6f7691b1fdeb513f56608cd2c32c51f8194bf51

Update actions/setup-go action to v2.2.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-2.x
• Merge into: main
• Upgrade actions/setup-go to v2.2.0

Update dependency @​actions/github to v5.1.1

• Schedule: ["at any time"]
• Branch name: renovate/actions-github-5.x-lockfile
• Merge into: main
• Upgrade @actions/github to 5.1.1

Update dependency @​vercel/ncc to ^0.36.0

• Schedule: ["at any time"]
• Branch name: renovate/vercel-ncc-0.x
• Merge into: main
• Upgrade @vercel/ncc to ^0.36.0

Update dependency axios to ^0.27.0

• Schedule: ["at any time"]
• Branch name: renovate/axios-0.x
• Merge into: main
• Upgrade axios to ^0.27.0

Update dependency octokat to ^0.10.0

• Schedule: ["at any time"]
• Branch name: renovate/octokat-0.x
• Merge into: main
• Upgrade octokat to ^0.10.0

Update dependency typescript to v4.9.5

• Schedule: ["at any time"]
• Branch name: renovate/typescript-4.x-lockfile
• Merge into: main
• Upgrade typescript to 4.9.5

Update github/codeql-action action to v2.3.6

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-2.x
• Merge into: main
• Upgrade github/codeql-action to 83f0fe6c4988d98a455712a27f0255212bba9bd4

Update golang Docker tag to v1.20

• Schedule: ["at any time"]
• Branch name: renovate/golang-1.x
• Merge into: main
• Upgrade golang to sha256:3fccedea46315261e4b6205bcffe91ece1e2aea60c23aab0f033f35461849b42

Update module github.com/PaesslerAG/gval to v1.2.2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-paesslerag-gval-1.x
• Merge into: main
• Upgrade github.com/PaesslerAG/gval to v1.2.2

Update module github.com/aws/aws-lambda-go to v1.41.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-aws-aws-lambda-go-1.x
• Merge into: main
• Upgrade github.com/aws/aws-lambda-go to v1.41.0

Update module github.com/aws/aws-sdk-go to v1.44.275

• Schedule: ["at any time"]
• Branch name: renovate/github.com-aws-aws-sdk-go-1.x
• Merge into: main
• Upgrade github.com/aws/aws-sdk-go to v1.44.275

Update module github.com/google/go-containerregistry to v0.15.2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-google-go-containerregistry-0.x
• Merge into: main
• Upgrade github.com/google/go-containerregistry to v0.15.2

Update module github.com/jarcoal/httpmock to v1.3.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-jarcoal-httpmock-1.x
• Merge into: main
• Upgrade github.com/jarcoal/httpmock to v1.3.0

Update module golang.org/x/oauth2 to v0.8.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-oauth2-0.x
• Merge into: main
• Upgrade golang.org/x/oauth2 to 839de2255f57ac5af1321327f280f79471825bc9

Update ossf/scorecard-action action to v2.1.3

• Schedule: ["at any time"]
• Branch name: renovate/ossf-scorecard-action-2.x
• Merge into: main
• Upgrade ossf/scorecard-action to 80e868c13c90f172d68d1f4501dee99e2479f7af

Update python Docker tag to v3.11

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to sha256:3a619e3c96fd4c5fc5e1998fd4dcb1f1403eb90c4c6409c70d7e80b9468df7df
• Upgrade python to 3.11

Update actions/checkout action

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-3.x
• Merge into: main
• Upgrade actions/checkout to 8e5e7e5ab8b370d6c329ec480221332ada57f0ab
• Upgrade actions/checkout to v3

Update actions/dependency-review-action action to v3

• Schedule: ["at any time"]
• Branch name: renovate/actions-dependency-review-action-3.x
• Merge into: main
• Upgrade actions/dependency-review-action to v3

Update actions/setup-go action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-4.x
• Merge into: main
• Upgrade actions/setup-go to v4.0.1

Update dependency @​types/node to v18

• Schedule: ["at any time"]
• Branch name: renovate/node-18.x
• Merge into: main
• Upgrade @types/node to ^18.0.0

Update dependency axios to v1

• Schedule: ["at any time"]
• Branch name: renovate/axios-1.x
• Merge into: main
• Upgrade axios to ^1.0.0

Update dependency typescript to v5

• Schedule: ["at any time"]
• Branch name: renovate/typescript-5.x
• Merge into: main
• Upgrade typescript to ^5.0.0

Update module github.com/google/go-github/v40 to v52

• Schedule: ["at any time"]
• Branch name: renovate/github.com-google-go-github-v40-52.x
• Merge into: main
• Upgrade github.com/google/go-github/v40 to v52.0.0

Update module github.com/lestrrat-go/jwx to v2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-lestrrat-go-jwx-2.x
• Merge into: main
• Upgrade github.com/lestrrat-go/jwx to v2.0.9

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Mend Renovate. View repository job log here.