Configure Renovate

[dec-bnl-renovate-self-hosted-prod]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• MODULE.bazel (bazel-module)
• .bazelversion (bazelisk)
• .github/workflows/master.yaml (github-actions)
• .github/workflows/pull-requests.yaml (github-actions)
• go.mod (gomod)
• package.json (npm)
• renovate.json (renovate-config)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs
• Enable Renovate configuration migration PRs when needed.
• Pin Docker digests.
• Enable the pre-commit manager.
• Enable Renovate.
• Pin github-action digests.
• Upgrade to unstable versions only if the existing version is unstable.
• Run lock file maintenance (updates) early Monday mornings.
• Pin dependency versions for development dependencies.
• Show OpenSSF badge on pull requests.
• Show all Merge Confidence badges for pull requests.

---

What to Expect

With your current configuration, Renovate will create 10 Pull Requests, up to a maximum of 42 over time (see docs for prConcurrentLimit), plus 9 security update Pull Requests which are not subject to this limit:

Update module github.com/go-jose/go-jose/v3 to v3.0.5 [SECURITY]

• Branch name: renovate/go-github.com-go-jose-go-jose-v3-vulnerability
• Merge into: master
• Upgrade github.com/go-jose/go-jose/v3 to v3.0.5

Update module github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream to v1.7.8 [SECURITY]

• Branch name: renovate/go-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-vulnerability
• Merge into: master
• Upgrade github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream to v1.7.8

Update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 [SECURITY]

• Branch name: renovate/go-github.com-aws-aws-sdk-go-v2-service-s3-vulnerability
• Merge into: master
• Upgrade github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3

Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace to v1.45.0 [SECURITY]

• Branch name: renovate/go-go.opentelemetry.io-otel-exporters-otlp-otlptrace-vulnerability
• Merge into: master
• Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace to v1.45.0

Update module go.opentelemetry.io/otel/sdk to v1.45.0 [SECURITY]

• Branch name: renovate/go-go.opentelemetry.io-otel-sdk-vulnerability
• Merge into: master
• Upgrade go.opentelemetry.io/otel/sdk to v1.45.0

Update module golang.org/x/crypto to v0.52.0 [SECURITY]

• Branch name: renovate/go-golang.org-x-crypto-vulnerability
• Merge into: master
• Upgrade golang.org/x/crypto to v0.52.0

Update module golang.org/x/net to v0.55.0 [SECURITY]

• Branch name: renovate/go-golang.org-x-net-vulnerability
• Merge into: master
• Upgrade golang.org/x/net to v0.55.0

Update module golang.org/x/oauth2 to v0.27.0 [SECURITY]

• Branch name: renovate/go-golang.org-x-oauth2-vulnerability
• Merge into: master
• Upgrade golang.org/x/oauth2 to v0.27.0

Update module google.golang.org/grpc to v1.83.1 [SECURITY]

• Branch name: renovate/go-google.golang.org-grpc-vulnerability
• Merge into: master
• Upgrade google.golang.org/grpc to v1.83.1

Update bazel_remote_apis digest to 6def1c5

• Schedule: ["at any time"]
• Branch name: renovate/bazel_remote_apis-digest
• Merge into: master
• Upgrade bazel_remote_apis to 6def1c5d27a527c400875c24ae8b1a160145d7e1

Update busybox Docker digest to fd7dc98

• Schedule: ["at any time"]
• Branch name: renovate/busybox
• Merge into: master
• Upgrade busybox to sha256:fd7dc98638c8e305f4dc34e979f1c0fdfdcaeb0fbf8fcff77ae834b6da3d7e6e

Update com_github_buildbarn_bb_storage digest to 6ded598

• Schedule: ["at any time"]
• Branch name: renovate/com_github_buildbarn_bb_storage-digest
• Merge into: master
• Upgrade com_github_buildbarn_bb_storage to 6ded598f64a3a92cfae0bc7de6d33bedc660f635

Update com_github_buildbarn_go_xdr digest to a209589

• Schedule: ["at any time"]
• Branch name: renovate/com_github_buildbarn_go_xdr-digest
• Merge into: master
• Upgrade com_github_buildbarn_go_xdr to a2095890273efee7f8bb2b0007914f8b66398c57

Update dependency googleapis to v0.0.0-20260929-28769825

• Schedule: ["at any time"]
• Branch name: renovate/googleapis-0.x
• Merge into: master
• Upgrade googleapis to 0.0.0-20260929-28769825

Update module github.com/spf13/pflag to v1.0.10

• Schedule: ["at any time"]
• Branch name: renovate/github.com-spf13-pflag-1.x
• Merge into: master
• Upgrade github.com/spf13/pflag to v1.0.10

Update module google.golang.org/protobuf to v1.36.12

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-protobuf-1.x
• Merge into: master
• Upgrade google.golang.org/protobuf to v1.36.12

Update dependency aspect_bazel_lib to v2.22.5

• Schedule: ["at any time"]
• Branch name: renovate/aspect_bazel_lib-2.x
• Merge into: master
• Upgrade aspect_bazel_lib to 2.22.5

Update dependency aspect_rules_js to v2.9.3

• Schedule: ["at any time"]
• Branch name: renovate/aspect_rules_js-2.x
• Merge into: master
• Upgrade aspect_rules_js to 2.9.3

Update dependency bazel to v8.8.1

• Schedule: ["at any time"]
• Branch name: renovate/bazel-8.x
• Merge into: master
• Upgrade bazel to 8.8.1

Update dependency gazelle to v0.54.0

• Schedule: ["at any time"]
• Branch name: renovate/gazelle-0.x
• Merge into: master
• Upgrade gazelle to 0.54.0

Update dependency protobuf to v29.5

• Schedule: ["at any time"]
• Branch name: renovate/protobuf-monorepo
• Merge into: master
• Upgrade protobuf to 29.5

Update dependency rules_go to v0.64.2

• Schedule: ["at any time"]
• Branch name: renovate/rules_go-0.x
• Merge into: master
• Upgrade rules_go to 0.64.2

Update dependency rules_jsonnet to v0.7.2

• Schedule: ["at any time"]
• Branch name: renovate/rules_jsonnet-0.x
• Merge into: master
• Upgrade rules_jsonnet to 0.7.2

Update dependency rules_oci to v2.3.0

• Schedule: ["at any time"]
• Branch name: renovate/rules_oci-2.x
• Merge into: master
• Upgrade rules_oci to 2.3.0

Update dependency rules_pkg to v1.3.0

• Schedule: ["at any time"]
• Branch name: renovate/rules_pkg-1.x
• Merge into: master
• Upgrade rules_pkg to 1.3.0

Update dependency toolchains_llvm to v1.11.3

• Schedule: ["at any time"]
• Branch name: renovate/toolchains_llvm-1.x
• Merge into: master
• Upgrade toolchains_llvm to 1.11.3

Update go module directive to v1.27.2

• Schedule: ["at any time"]
• Branch name: renovate/go-1.x
• Merge into: master
• Upgrade go to 1.27.2

Update module cloud.google.com/go/longrunning to v0.13.0

• Schedule: ["at any time"]
• Branch name: renovate/cloud.google.com-go-longrunning-0.x
• Merge into: master
• Upgrade cloud.google.com/go/longrunning to v0.13.0

Update module github.com/hanwen/go-fuse/v2 to v2.12.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-hanwen-go-fuse-v2-2.x
• Merge into: master
• Upgrade github.com/hanwen/go-fuse/v2 to v2.12.0

Update module github.com/prometheus/client_golang to v1.25.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-prometheus-client_golang-1.x
• Merge into: master
• Upgrade github.com/prometheus/client_golang to v1.25.0

Update module github.com/stretchr/testify to v1.12.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-stretchr-testify-1.x
• Merge into: master
• Upgrade github.com/stretchr/testify to v1.12.1

Update module go.uber.org/mock to v0.6.0

• Schedule: ["at any time"]
• Branch name: renovate/gomock-monorepo
• Merge into: master
• Upgrade go.uber.org/mock to v0.6.0

Update module golang.org/x/sync to v0.24.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-sync-0.x
• Merge into: master
• Upgrade golang.org/x/sync to v0.24.0

Update module golang.org/x/sys to v0.49.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-sys-0.x
• Merge into: master
• Upgrade golang.org/x/sys to v0.49.0

Update module mvdan.cc/gofumpt to v0.12.0

• Schedule: ["at any time"]
• Branch name: renovate/mvdan.cc-gofumpt-0.x
• Merge into: master
• Upgrade mvdan.cc/gofumpt to v0.12.0

Update opentelemetry-go monorepo to v1.47.0

• Schedule: ["at any time"]
• Branch name: renovate/opentelemetry-go-monorepo
• Merge into: master
• Upgrade go.opentelemetry.io/otel to v1.47.0
• Upgrade go.opentelemetry.io/otel/trace to v1.47.0

Update dependency aspect_rules_js to v3

• Schedule: ["at any time"]
• Branch name: renovate/aspect_rules_js-3.x
• Merge into: master
• Upgrade aspect_rules_js to 3.5.1

Update dependency bazel to v9

• Schedule: ["at any time"]
• Branch name: renovate/bazel-9.x
• Merge into: master
• Upgrade bazel to 9.3.0

Update dependency protobuf to v36

• Schedule: ["at any time"]
• Branch name: renovate/major-protobuf-monorepo
• Merge into: master
• Upgrade protobuf to 36.2

Update dependency purgecss to v8

• Schedule: ["at any time"]
• Branch name: renovate/purgecss-8.x
• Merge into: master
• Upgrade purgecss to sha512-QFJyps9y5oHeXnNA3Ql1EaAqWBivNwQn19Pw1lt9RxfB+4e+bIyqCyuombk79D6Fxe+lPXggVfI1WtRGEBwgbQ==

Update module cloud.google.com/go/longrunning to v1

• Schedule: ["at any time"]
• Branch name: renovate/cloud.google.com-go-longrunning-1.x
• Merge into: master
• Upgrade cloud.google.com/go/longrunning to v1.3.0

Lock file maintenance

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/lock-file-maintenance
• Merge into: master
• Regenerate lock files to use latest dependency versions

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details. Security update Pull Requests are not subject to this limit and will be created straight away.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Mend Renovate CLI.