Update renovate config

.github/renovate.json

@@ -0,0 +1,6 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "local>nginxinc/k8s-common"
+  ]
+}

.pre-commit-config.yaml

@@ -24,6 +24,7 @@ repos:
       - id: no-commit-to-branch
       - id: requirements-txt-fixer
       - id: fix-byte-order-marker
+      - id: detect-private-key
 
   - repo: https://github.com/gitleaks/gitleaks
     rev: v8.18.4

default.json

@@ -0,0 +1,147 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "automerge": true,
+  "automergeStrategy": "squash",
+  "commitBodyTable": true,
+  "configMigration": true,
+  "customDatasources": {
+    "nginx-plus": {
+      "defaultRegistryUrlTemplate": "https://raw.githubusercontent.com/lucacome/renovate-datasource/main/nginx-plus/releases.json",
+      "format": "json"
+    }
+  },
+  "extends": [
+    "config:recommended",
+    "docker:enableMajor",
+    "helpers:pinGitHubActionDigests",
+    ":gitSignOff",
+    ":maintainLockFilesMonthly",
+    ":disableRateLimiting"
+  ],
+  "ignorePaths": [
+    "**/node_modules/**"
+  ],
+  "ignorePresets": [
+    ":ignoreModulesAndTests"
+  ],
+  "labels": [
+    "dependencies"
+  ],
+  "packageRules": [
+    {
+      "enabled": false,
+      "matchPackageNames": [
+        "boto3"
+      ],
+      "matchUpdateTypes": [
+        "patch"
+      ]
+    },
+    {
+      "addLabels": [
+        "go"
+      ],
+      "matchDatasources": [
+        "go",
+        "golang-version"
+      ]
+    },
+    {
+      "addLabels": [
+        "python"
+      ],
+      "matchDatasources": [
+        "pypi"
+      ]
+    },
+    {
+      "addLabels": [
+        "javascript"
+      ],
+      "matchDatasources": [
+        "npm"
+      ],
+      "rangeStrategy": "bump"
+    },
+    {
+      "addLabels": [
+        "docker"
+      ],
+      "matchDatasources": [
+        "docker"
+      ]
+    },
+    {
+      "addLabels": [
+        "helm"
+      ],
+      "matchDatasources": [
+        "helm"
+      ]
+    }
+  ],
+  "postUpdateOptions": [
+    "gomodTidy",
+    "gomodUpdateImportPaths",
+    "yarnDedupeHighest",
+    "npmDedupe"
+  ],
+  "pre-commit": {
+    "enabled": true
+  },
+  "rebaseWhen": "behind-base-branch",
+  "regexManagers": [
+    {
+      "datasourceTemplate": "github-tags",
+      "description": "Update Github Action references in the Markdown files",
+      "fileMatch": [
+        "\\.md$"
+      ],
+      "matchStrings": [
+        "\\suses: (?<depName>[\\w-]+/[\\w-]+)(?<path>/.*)?@(?<currentValue>v\\d+\\.\\d+\\.\\d+)",
+        "\\suses: (?<depName>[\\w-]+/[\\w-]+)(?<path>/.*)?@(?<currentDigest>[a-z0-9]{40}|[a-z0-9]{64}) # (?<currentValue>v\\d+\\.\\d+\\.\\d+)"
+      ],
+      "versioningTemplate": "semver"
+    },
+    {
+      "description": "Update _VERSION variables in shell scripts and Makefiles",
+      "fileMatch": [
+        "\\.sh$",
+        "(^|/)Makefile$"
+      ],
+      "matchStrings": [
+        "# renovate: datasource=(?<datasource>[a-z-]+?) depName=(?<depName>.+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>[a-z-]+?))?\\s[A-Z_]+?_VERSION = (?<currentValue>.+?)\\s"
+      ]
+    },
+    {
+      "description": "Update _VERSION variables in Dockerfiles",
+      "fileMatch": [
+        "(^|/|\\.)Dockerfile$",
+        "(^|/)Dockerfile\\.[^/]*$"
+      ],
+      "matchStrings": [
+        "# renovate: datasource=(?<datasource>[a-z-]+?) depName=(?<depName>.+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>[a-z-]+?))?\\s(?:ENV|ARG) .+?_VERSION=(?<currentValue>.+?)\\s"
+      ]
+    },
+    {
+      "description": "Update `version:` and `_VERSION:` variables in github workflows",
+      "fileMatch": [
+        "^\\.github/workflows/[^/]+\\.ya?ml$"
+      ],
+      "matchStrings": [
+        "\\s+(?:[a-z]-)?version: (?<currentValue>.+?) # renovate: datasource=(?<datasource>.+?) depName=(?<depName>.+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>.+?))?\\s",
+        "\\s*[A-Z_]+?_VERSION=(?<currentValue>.+?) # renovate: datasource=(?<datasource>.+?) depName=(?<depName>.+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>.+?))?\\s"
+      ]
+    },
+    {
+      "fileMatch": [
+        "\\.go$"
+      ],
+      "matchStrings": [
+        "// renovate: datasource=(?<datasource>[a-z-]+?) depName=(?<depName>.+?)(?: registryUrl=(?<registryUrl>.+?))?(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>[a-z-]+?))?\\s.+?Version :?= \"(?<currentValue>.+?)\"\\s"
+      ],
+      "versioningTemplate": "{{#if versioning}}{{versioning}}{{else}}semver{{/if}}"
+    }
+  ],
+  "timezone": "America/Los_Angeles"
+}

labeler.yml

@@ -0,0 +1,39 @@
+change:
+  - head-branch: ["^change/"]
+
+enhancement:
+  - head-branch: ["^feature/", "^feat/", "^enhancement/", "^enh/"]
+
+bug:
+  - head-branch: ["^fix/", "^bug/"]
+
+chore:
+  - head-branch: ["^chore/"]
+
+tech-debt:
+  - head-branch: ["^tech-debt/", "^techdebt/", "^debt/"]
+
+documentation:
+  - head-branch: ["^docs/", "^doc/"]
+  - changed-files:
+      - any-glob-to-any-file: "**/*.md"
+
+dependencies:
+  - head-branch:
+      ["^deps/", "^dep/", "^dependabot/", "^renovate/", "pre-commit-ci-update-config"]
+  - changed-files:
+      - any-glob-to-any-file: ["go.mod", "go.sum"]
+
+tests:
+  - any:
+      - head-branch: ["^tests/", "^test/"]
+      - changed-files:
+          - any-glob-to-any-file: "tests/**/*"
+  - all:
+      - changed-files:
+          - all-globs-to-all-files: ["!tests/requirements.txt", "!tests/**/go.mod", "!tests/**/go.sum"]
+
+helm-chart:
+  - head-branch: ["^helm/", "^helm-chart/"]
+  - changed-files:
+      - any-glob-to-any-file: ["charts/**/*"]