Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• Dockerfile (dockerfile)
• .github/workflows/ci.yml (github-actions)
• .github/workflows/dependabot-auto-merge.yml (github-actions)
• .github/workflows/dependency-review.yml (github-actions)
• .github/workflows/fossa.yml (github-actions)
• .github/workflows/labeler.yml (github-actions)
• .github/workflows/lint.yml (github-actions)
• .github/workflows/scorecards.yml (github-actions)
• .pre-commit-config.yaml (pre-commit)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Enable Docker major updates.
• Pin github-action digests.
• Append Signed-off-by: to signoff Git commits.
• Run lock file maintenance (updates) on the first day of each month.
• Remove hourly and concurrent rate limits.
• Weekly schedule on early Monday mornings.
• Run Renovate on following schedule: before 4am on Monday

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 4 Pull Requests:

Update anchore/scan-action action to v4.1.2

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/anchore-scan-action-4.x
• Merge into: main
• Upgrade anchore/scan-action to 64a33b277ea7a1215a3c142735a1091341939ff5

Update github/codeql-action action to v3.26.4

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/github-codeql-action-3.x
• Merge into: main
• Upgrade github/codeql-action to f0f3afee809481da311ca3a6ff1ff51d81dbeb24

Update alpine Docker tag to v3.20

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/alpine-3.x
• Merge into: main
• Upgrade alpine to 3.20

Update docker/dockerfile Docker tag to v1.9

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/docker-dockerfile-1.x
• Merge into: main
• Upgrade docker/dockerfile to 1.9

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.