Configure Renovate

[renovate-bot]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/actions/detect-workflow/Dockerfile (dockerfile)
• .github/workflows/builder_go_slsa3.yml (github-actions)
• .github/workflows/codeql-analysis.yml (github-actions)
• .github/workflows/generator_generic_slsa3.yml (github-actions)
• .github/workflows/pre-submit.e2e.generic.default.yml (github-actions)
• .github/workflows/pre-submit.e2e.go.config-ldflags-main-dir.yml (github-actions)
• .github/workflows/pre-submit.units.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• .github/actions/detect-workflow/go.mod (gomod)
• go.mod (gomod)
• internal/builders/go/e2e-presubmits/go.mod (gomod)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Enable Renovate Dependency Dashboard creation
• If semantic commits detected, use semantic commit type fix for dependencies and chore for all others
• Ignore node_modules, bower_components, vendor and various test/tests directories
• Autodetect whether to pin dependencies or maintain ranges
• Rate limit PR creation to a maximum of two per hour
• Limit to maximum 10 open PRs at any time
• Group known monorepo packages together
• Use curated list of recommended non-monorepo package groupings
• A collection of workarounds for known problems with packages

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.

---

What to Expect

With your current configuration, Renovate will create 11 Pull Requests:

Update actions/checkout digest to 2541b12

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-digest
• Merge into: main
• Upgrade actions/checkout to 2541b1294d2704b0964813337f33b291d3f8596b

Update actions/download-artifact digest to 076f0f7

• Schedule: ["at any time"]
• Branch name: renovate/actions-download-artifact-digest
• Merge into: main
• Upgrade actions/download-artifact to 076f0f7dd036d87e8e04f5f00d614e790308961b

Update gcr.io/distroless/static digest to 2ad9501

• Schedule: ["at any time"]
• Branch name: renovate/gcr.io-distroless-static-digest
• Merge into: main
• Upgrade gcr.io/distroless/static to sha256:2ad95019a0cbf07e0f917134f97dd859aaccc09258eb94edcb91674b3c1f448f

Update golang digest to a452d62

• Schedule: ["at any time"]
• Branch name: renovate/golang-digest
• Merge into: main
• Upgrade golang to sha256:a452d6273ad03a47c2f29b898d6bb57630e77baf839651ef77d03e4e049c5bf3

Update golang.org/x/oauth2 digest to fd043fe

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-oauth2-digest
• Merge into: main
• Upgrade golang.org/x/oauth2 to fd043fe589d2d1486b6af56f44a691e819752a23

Update slsa-framework/slsa-github-generator digest to 201180e

• Schedule: ["at any time"]
• Branch name: renovate/slsa-framework-slsa-github-generator-digest
• Merge into: main
• Upgrade slsa-framework/slsa-github-generator to 201180e429eec52ccd5eb54e514296b13d0de53c

Update softprops/action-gh-release digest to 50195ba

• Schedule: ["at any time"]
• Branch name: renovate/softprops-action-gh-release-digest
• Merge into: main
• Upgrade softprops/action-gh-release to 50195ba7f6f93d1ac97ba8332a178e008ad176aa

Update module github.com/slsa-framework/slsa-github-generator to v0.0.2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-slsa-framework-slsa-github-generator-0.x
• Merge into: main
• Upgrade github.com/slsa-framework/slsa-github-generator to b18a9ec9f79bb22067a9e91d3ddf170e7d9884f8

Update module github.com/sigstore/sigstore to v1.3.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-sigstore-sigstore-1.x
• Merge into: main
• Upgrade github.com/sigstore/sigstore to v1.3.0

Update module github.com/coreos/go-oidc to v3

• Schedule: ["at any time"]
• Branch name: renovate/github.com-coreos-go-oidc-3.x
• Merge into: main
• Upgrade github.com/coreos/go-oidc to v3.2.0

Update module github.com/slsa-framework/slsa-github-generator to v1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-slsa-framework-slsa-github-generator-1.x
• Merge into: main
• Upgrade github.com/slsa-framework/slsa-github-generator to b18a9ec9f79bb22067a9e91d3ddf170e7d9884f8

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or spam the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Mend Renovate. View repository job log here.

[laurentsimon]

batched PR not yet supported renovatebot/renovate#4404

[laurentsimon]

Let's give renovatebot a try!