chore: Configure Renovate

[anaconda-renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• Dockerfile (dockerfile)
• Dockerfile.dev (dockerfile)
• .github/workflows/backport.yaml (github-actions)
• .github/workflows/ci.yaml (github-actions)
• .github/workflows/governance.yaml (github-actions)
• .github/workflows/lint-pr.yaml (github-actions)
• .github/workflows/release.yaml (github-actions)
• .github/workflows/stale.yaml (github-actions)
• go.mod (gomod)
• hack/tools/go.mod (gomod)
• charts/kargo/values.yaml (helm-values)
• docs/package.json (npm)
• docs/plugins/gtag/package.json (npm)
• ui/package.json (npm)
• .github/workflows/release.yaml (regex)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Pin Docker digests.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Pin github-action digests.
• Use node versioning for @types/node.
• Use specific versioning for Red Hat-maintained container images.
• Update _VERSION variables in Dockerfiles.
• Update _VERSION environment variables in GitHub Action files.
• Use the Anaconda Best Practice configuration from anaconda/renovate-config
• Create a Dependency Dashboard as Issue, listing all upgrades
• Open new PRs automatically every weekday before 6am UTC. You can manually trigger PRs from the Dependency Dashboard, those will be opened once renovate runs again (once every hour)
• Label all PRs with renovate
• Use semantic commit messages for all upgrades
• Open a maximum of 10 PRs concurrently
• Automatically set reviewers from CODEOWNERS
• Upgrade arbitrary dependencies in Dockerfiles when you mark them, see the documentation for details
• Run Renovate on following schedule: every weekday

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 78 Pull Requests:

chore(deps): pin dependencies

• Schedule: ["every weekday"]
• Branch name: renovate/pin-dependencies
• Merge into: main
• Upgrade alpine to sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a
• Upgrade anchore/sbom-action to 55dc4ee22412511ee8c3142cbea40418e6cec693
• Upgrade aws-actions/configure-aws-credentials to e3dd6a429d7300a6a4c196c26e071d42e0343502
• Upgrade azure/setup-helm to fe7b79cd5ee1e45176fcad797de68ecaf3ca4814
• Upgrade curlimages/curl to sha256:d9b4541e214bcd85196d6e92e2753ac6d0ea699f0af5741f8c6cccbfcf00ef4b
• Upgrade docker.io/library/node to sha256:bd00c03095f7586432805dbf7989be10361d27987f93de904b1fc003949a4794
• Upgrade docker/build-push-action to 48aba3b46d1b1fec4febb7c5d0c644b249a11355
• Upgrade docker/login-action to 9780b0c442fbb1117ed29e0efdff1e18412f7567
• Upgrade docker/metadata-action to 369eb591f429131d6889c46b94e711f089e6ca96
• Upgrade ghcr.io/dexidp/dex to sha256:f579d00721b0d842328c43a562f50343c54b0048ef2d58d6b54e750c21fc7938
• Upgrade golang to sha256:2341ddffd3eddb72e0aebab476222fbc24d4a507c4d490a51892ec861bdb71fc
• Upgrade registry to sha256:543dade69668e02e5768d7ea2b0aa4fae6aa7384c9a5a8dbecc2be5136079ddb
• Upgrade slsa-framework/slsa-github-generator to 5a775b367a56d5bd118a224a811bba288150a563
• Upgrade svenstaro/upload-release-action to 04733e069f2d7f7f0b4aebc4fbdbce8613b03ccd

chore(deps): update k8s.io/utils digest to 6fe5fd8

• Schedule: ["every weekday"]
• Branch name: renovate/k8s.io-utils-digest
• Merge into: main
• Upgrade k8s.io/utils to 6fe5fd82f078

chore(deps): update aws-sdk-go-v2 monorepo

• Schedule: ["every weekday"]
• Branch name: renovate/aws-sdk-go-v2-monorepo
• Merge into: main
• Upgrade github.com/aws/aws-sdk-go-v2 to v1.32.6
• Upgrade github.com/aws/aws-sdk-go-v2/config to v1.28.6
• Upgrade github.com/aws/aws-sdk-go-v2/credentials to v1.17.47
• Upgrade github.com/aws/aws-sdk-go-v2/service/ecr to v1.36.7
• Upgrade github.com/aws/aws-sdk-go-v2/service/sts to v1.33.2

chore(deps): update dependency @​apidevtools/json-schema-ref-parser to v11.7.2

• Schedule: ["every weekday"]
• Branch name: renovate/apidevtools-json-schema-ref-parser-11.x-lockfile
• Merge into: main
• Upgrade @apidevtools/json-schema-ref-parser to 11.7.2

chore(deps): update dependency @​hookform/resolvers to v3.9.1

• Schedule: ["every weekday"]
• Branch name: renovate/hookform-resolvers-3.x-lockfile
• Merge into: main
• Upgrade @hookform/resolvers to 3.9.1

chore(deps): update dependency @​vitejs/plugin-react to v4.3.4

• Schedule: ["every weekday"]
• Branch name: renovate/vitejs-plugin-react-4.x-lockfile
• Merge into: main
• Upgrade @vitejs/plugin-react to 4.3.4

chore(deps): update dependency eslint-plugin-react-refresh to v0.4.16

• Schedule: ["every weekday"]
• Branch name: renovate/eslint-plugin-react-refresh-0.x-lockfile
• Merge into: main
• Upgrade eslint-plugin-react-refresh to 0.4.16

chore(deps): update dependency less to v4.2.1

• Schedule: ["every weekday"]
• Branch name: renovate/less-4.x-lockfile
• Merge into: main
• Upgrade less to 4.2.1

chore(deps): update dependency monaco-yaml to v5.2.3

• Schedule: ["every weekday"]
• Branch name: renovate/monaco-yaml-5.x-lockfile
• Merge into: main
• Upgrade monaco-yaml to 5.2.3

chore(deps): update dependency postcss to v8.4.49

• Schedule: ["every weekday"]
• Branch name: renovate/postcss-8.x-lockfile
• Merge into: main
• Upgrade postcss to 8.4.49

chore(deps): update dependency react-hook-form to v7.53.2

• Schedule: ["every weekday"]
• Branch name: renovate/react-hook-form-7.x-lockfile
• Merge into: main
• Upgrade react-hook-form to 7.53.2

chore(deps): update dependency tailwindcss to v3.4.15

• Schedule: ["every weekday"]
• Branch name: renovate/tailwindcss-3.x-lockfile
• Merge into: main
• Upgrade tailwindcss to 3.4.15

chore(deps): update dependency vite to v5.4.11

• Schedule: ["every weekday"]
• Branch name: renovate/vite-5.x-lockfile
• Merge into: main
• Upgrade vite to 5.4.11

chore(deps): update dependency vitest to v2.1.8

• Schedule: ["every weekday"]
• Branch name: renovate/vitest-monorepo
• Merge into: main
• Upgrade vitest to 2.1.8

chore(deps): update golang docker tag to v1.23.3

• Schedule: ["every weekday"]
• Branch name: renovate/golang-1.x
• Merge into: main
• Upgrade golang to sha256:3f3b9daa3de608f3e869cd2ff8baf21555cf0fca9fd34251b8f340f9b7c30ec5

chore(deps): update kubernetes packages to v0.31.3

• Schedule: ["every weekday"]
• Branch name: renovate/kubernetes-go
• Merge into: main
• Upgrade k8s.io/api to v0.31.3
• Upgrade k8s.io/apiextensions-apiserver to v0.31.3
• Upgrade k8s.io/apimachinery to v0.31.3
• Upgrade k8s.io/apiserver to v0.31.3
• Upgrade k8s.io/cli-runtime to v0.31.3
• Upgrade k8s.io/client-go to v0.31.3
• Upgrade k8s.io/code-generator to v0.31.3

chore(deps): update module github.com/masterminds/semver/v3 to v3.3.1

• Schedule: ["every weekday"]
• Branch name: renovate/github.com-masterminds-semver-v3-3.x
• Merge into: main
• Upgrade github.com/Masterminds/semver/v3 to v3.3.1

chore(deps): update module google.golang.org/protobuf to v1.35.2

• Schedule: ["every weekday"]
• Branch name: renovate/google.golang.org-protobuf-1.x
• Merge into: main
• Upgrade google.golang.org/protobuf to v1.35.2

chore(deps): update module helm.sh/helm/v3 to v3.16.3

• Schedule: ["every weekday"]
• Branch name: renovate/helm.sh-helm-v3-3.x
• Merge into: main
• Upgrade helm.sh/helm/v3 to v3.16.3

chore(deps): update module sigs.k8s.io/controller-runtime to v0.19.3

• Schedule: ["every weekday"]
• Branch name: renovate/sigs.k8s.io-controller-runtime-0.x
• Merge into: main
• Upgrade sigs.k8s.io/controller-runtime to v0.19.3

chore(deps): update react monorepo

• Schedule: ["every weekday"]
• Branch name: renovate/react-monorepo
• Merge into: main
• Upgrade @types/react to 18.3.12
• Upgrade @types/react-dom to 18.3.1
• Upgrade react to 18.3.1
• Upgrade react-dom to 18.3.1

chore(deps): update curlimages/curl docker tag to v8.11.0

• Schedule: ["every weekday"]
• Branch name: renovate/curlimages-curl-8.x
• Merge into: main
• Upgrade curlimages/curl to sha256:83a505ba2ba62f208ed6e410c268b7b9aa48f0f7b403c8108b9773b44199dbba

chore(deps): update dependency @​connectrpc/connect to v1.6.1

• Schedule: ["every weekday"]
• Branch name: renovate/connectrpc-connect-1.x
• Merge into: main
• Upgrade @connectrpc/connect to 1.6.1

chore(deps): update dependency @​connectrpc/connect-web to v1.6.1

• Schedule: ["every weekday"]
• Branch name: renovate/connectrpc-connect-web-1.x
• Merge into: main
• Upgrade @connectrpc/connect-web to 1.6.1

chore(deps): update dependency @​eslint/compat to v1.2.3

• Schedule: ["every weekday"]
• Branch name: renovate/eslint-compat-1.x-lockfile
• Merge into: main
• Upgrade @eslint/compat to 1.2.3

chore(deps): update dependency @mdx-js/react to v3.1.0

• Schedule: ["every weekday"]
• Branch name: renovate/mdx-monorepo
• Merge into: main
• Upgrade @mdx-js/react to 3.1.0

chore(deps): update dependency @​types/node to v20.17.9

• Schedule: ["every weekday"]
• Branch name: renovate/node-20.x-lockfile
• Merge into: main
• Upgrade @types/node to 20.17.9

chore(deps): update dependency @​types/node to v22.10.1

• Schedule: ["every weekday"]
• Branch name: renovate/node-22.x-lockfile
• Merge into: main
• Upgrade @types/node to 22.10.1

chore(deps): update dependency antd to v5.22.3

• Schedule: ["every weekday"]
• Branch name: renovate/antd-5.x-lockfile
• Merge into: main
• Upgrade antd to 5.22.3

chore(deps): update dependency eslint to v9.16.0

• Schedule: ["every weekday"]
• Branch name: renovate/eslint-monorepo
• Merge into: main
• Upgrade eslint to 9.16.0

chore(deps): update dependency eslint-plugin-import to v2.31.0

• Schedule: ["every weekday"]
• Branch name: renovate/eslint-plugin-import-2.x-lockfile
• Merge into: main
• Upgrade eslint-plugin-import to 2.31.0

chore(deps): update dependency eslint-plugin-react to v7.37.2

• Schedule: ["every weekday"]
• Branch name: renovate/eslint-plugin-react-7.x-lockfile
• Merge into: main
• Upgrade eslint-plugin-react to 7.37.2

chore(deps): update dependency globals to v15.13.0

• Schedule: ["every weekday"]
• Branch name: renovate/globals-15.x-lockfile
• Merge into: main
• Upgrade globals to 15.13.0

chore(deps): update dependency prettier to v3.4.1

• Schedule: ["every weekday"]
• Branch name: renovate/prettier-3.x-lockfile
• Merge into: main
• Upgrade prettier to 3.4.1

chore(deps): update dependency prism-react-renderer to v2.4.0

• Schedule: ["every weekday"]
• Branch name: renovate/prism-react-renderer-2.x-lockfile
• Merge into: main
• Upgrade prism-react-renderer to 2.4.0

chore(deps): update dependency react-router-dom to v6.28.0

• Schedule: ["every weekday"]
• Branch name: renovate/react-router-monorepo
• Merge into: main
• Upgrade react-router-dom to 6.28.0

chore(deps): update dependency recharts to v2.14.1

• Schedule: ["every weekday"]
• Branch name: renovate/recharts-2.x-lockfile
• Merge into: main
• Upgrade recharts to 2.14.1

chore(deps): update dependency tslib to v2.8.1

• Schedule: ["every weekday"]
• Branch name: renovate/tslib-2.x-lockfile
• Merge into: main
• Upgrade tslib to 2.8.1

chore(deps): update dependency typescript to v5.7.2

• Schedule: ["every weekday"]
• Branch name: renovate/typescript-5.x-lockfile
• Merge into: main
• Upgrade typescript to 5.7.2

chore(deps): update dependency typescript to ~5.7.0

• Schedule: ["every weekday"]
• Branch name: renovate/typescript-5.x
• Merge into: main
• Upgrade typescript to ~5.7.0

chore(deps): update dependency vite-tsconfig-paths to v5.1.3

• Schedule: ["every weekday"]
• Branch name: renovate/vite-tsconfig-paths-5.x-lockfile
• Merge into: main
• Upgrade vite-tsconfig-paths to 5.1.3

chore(deps): update dependency yaml to v2.6.1

• Schedule: ["every weekday"]
• Branch name: renovate/yaml-2.x-lockfile
• Merge into: main
• Upgrade yaml to 2.6.1

chore(deps): update dependency zx to v8.2.4

• Schedule: ["every weekday"]
• Branch name: renovate/zx-8.x-lockfile
• Merge into: main
• Upgrade zx to 8.2.4

chore(deps): update docker/build-push-action action to v6.10.0

• Schedule: ["every weekday"]
• Branch name: renovate/docker-build-push-action-6.x
• Merge into: main
• Upgrade docker/build-push-action to 48aba3b46d1b1fec4febb7c5d0c644b249a11355

chore(deps): update docusaurus monorepo to v3.6.3

• Schedule: ["every weekday"]
• Branch name: renovate/docusaurus-monorepo
• Merge into: main
• Upgrade @docusaurus/core to 3.6.3
• Upgrade @docusaurus/module-type-aliases to 3.6.3
• Upgrade @docusaurus/preset-classic to 3.6.3
• Upgrade @docusaurus/tsconfig to 3.6.3
• Upgrade @docusaurus/types to 3.6.3
• Upgrade @docusaurus/utils-validation to 3.6.3

chore(deps): update font awesome to v6.7.1

• Schedule: ["every weekday"]
• Branch name: renovate/font-awesome
• Merge into: main
• Upgrade @fortawesome/fontawesome-svg-core to 6.7.1
• Upgrade @fortawesome/free-brands-svg-icons to 6.7.1
• Upgrade @fortawesome/free-solid-svg-icons to 6.7.1

chore(deps): update ghcr.io/dexidp/dex docker tag to v2.41.1

• Schedule: ["every weekday"]
• Branch name: renovate/ghcr.io-dexidp-dex-2.x
• Merge into: main
• Upgrade ghcr.io/dexidp/dex to sha256:bc7cfce7c17f52864e2bb2a4dc1d2f86a41e3019f6d42e81d92a301fad0c8a1d

chore(deps): update module github.com/bufbuild/buf to v1.47.2

• Schedule: ["every weekday"]
• Branch name: renovate/github.com-bufbuild-buf-1.x
• Merge into: main
• Upgrade github.com/bufbuild/buf to v1.47.2

chore(deps): update module github.com/golangci/golangci-lint to v1.62.2

• Schedule: ["every weekday"]
• Branch name: renovate/github.com-golangci-golangci-lint-1.x
• Merge into: main
• Upgrade github.com/golangci/golangci-lint to v1.62.2

chore(deps): update module github.com/stretchr/testify to v1.10.0

• Schedule: ["every weekday"]
• Branch name: renovate/github.com-stretchr-testify-1.x
• Merge into: main
• Upgrade github.com/stretchr/testify to v1.10.0

chore(deps): update module github.com/xanzy/go-gitlab to v0.114.0

• Schedule: ["every weekday"]
• Branch name: renovate/github.com-xanzy-go-gitlab-0.x
• Merge into: main
• Upgrade github.com/xanzy/go-gitlab to v0.114.0

chore(deps): update module golang.org/x/crypto to v0.29.0

• Schedule: ["every weekday"]
• Branch name: renovate/golang.org-x-crypto-0.x
• Merge into: main
• Upgrade golang.org/x/crypto to v0.29.0

chore(deps): update module golang.org/x/net to v0.31.0

• Schedule: ["every weekday"]
• Branch name: renovate/golang.org-x-net-0.x
• Merge into: main
• Upgrade golang.org/x/net to v0.31.0

chore(deps): update module golang.org/x/oauth2 to v0.24.0

• Schedule: ["every weekday"]
• Branch name: renovate/golang.org-x-oauth2-0.x
• Merge into: main
• Upgrade golang.org/x/oauth2 to v0.24.0

chore(deps): update module golang.org/x/sync to v0.9.0

• Schedule: ["every weekday"]
• Branch name: renovate/golang.org-x-sync-0.x
• Merge into: main
• Upgrade golang.org/x/sync to v0.9.0

chore(deps): update module golang.org/x/tools to v0.27.0

• Schedule: ["every weekday"]
• Branch name: renovate/golang.org-x-tools-0.x
• Merge into: main
• Upgrade golang.org/x/tools to v0.27.0

chore(deps): update module google.golang.org/api to v0.209.0

• Schedule: ["every weekday"]
• Branch name: renovate/google.golang.org-api-0.x
• Merge into: main
• Upgrade google.golang.org/api to v0.209.0

chore(deps): update module google.golang.org/grpc to v1.68.0

• Schedule: ["every weekday"]
• Branch name: renovate/google.golang.org-grpc-1.x
• Merge into: main
• Upgrade google.golang.org/grpc to v1.68.0

chore(deps): update node.js to v22.11.0

• Schedule: ["every weekday"]
• Branch name: renovate/docker.io-library-node-22.x
• Merge into: main
• Upgrade docker.io/library/node to sha256:5c76d05034644fa8ecc9c2aa84e0a83cd981d0ef13af5455b87b9adf5b216561

chore(deps): update pnpm to v9.14.4

• Schedule: ["every weekday"]
• Branch name: renovate/pnpm-9.x
• Merge into: main
• Upgrade pnpm to 9.14.4

chore(deps): update rjsf monorepo to v5.23.1

• Schedule: ["every weekday"]
• Branch name: renovate/rjsf-monorepo
• Merge into: main
• Upgrade @rjsf/antd to 5.23.1
• Upgrade @rjsf/core to 5.23.1
• Upgrade @rjsf/validator-ajv8 to 5.23.1

chore(deps): update tanstack-query monorepo to v5.62.1

• Schedule: ["every weekday"]
• Branch name: renovate/tanstack-query-monorepo
• Merge into: main
• Upgrade @tanstack/react-query to 5.62.1
• Upgrade @tanstack/react-query-devtools to 5.62.1

chore(deps): update typescript-eslint monorepo to v8.17.0

• Schedule: ["every weekday"]
• Branch name: renovate/typescript-eslint-monorepo
• Merge into: main
• Upgrade @typescript-eslint/eslint-plugin to 8.17.0
• Upgrade @typescript-eslint/parser to 8.17.0

chore(deps): update codecov/codecov-action action to v5

• Schedule: ["every weekday"]
• Branch name: renovate/codecov-codecov-action-5.x
• Merge into: main
• Upgrade codecov/codecov-action to 015f24e6818733317a2da2edd6290ab26238649a

chore(deps): update dependency @​bufbuild/protobuf to v2

• Schedule: ["every weekday"]
• Branch name: renovate/bufbuild-protobuf-2.x
• Merge into: main
• Upgrade @bufbuild/protobuf to 2.2.2

chore(deps): update dependency @​cmfcmf/docusaurus-search-local to v1

• Schedule: ["every weekday"]
• Branch name: renovate/cmfcmf-docusaurus-search-local-1.x
• Merge into: main
• Upgrade @cmfcmf/docusaurus-search-local to ^1.0.0

chore(deps): update dependency @​connectrpc/connect to v2

• Schedule: ["every weekday"]
• Branch name: renovate/connectrpc-connect-2.x
• Merge into: main
• Upgrade @connectrpc/connect to 2.0.0

chore(deps): update dependency @​connectrpc/connect-query to v2

• Schedule: ["every weekday"]
• Branch name: renovate/connectrpc-connect-query-2.x
• Merge into: main
• Upgrade @connectrpc/connect-query to 2.0.0

chore(deps): update dependency @​connectrpc/connect-web to v2

• Schedule: ["every weekday"]
• Branch name: renovate/connectrpc-connect-web-2.x
• Merge into: main
• Upgrade @connectrpc/connect-web to 2.0.0

chore(deps): update dependency @​types/node to v22

• Schedule: ["every weekday"]
• Branch name: renovate/node-22.x
• Merge into: main
• Upgrade @types/node to ^22.0.0

chore(deps): update dependency clsx to v2

• Schedule: ["every weekday"]
• Branch name: renovate/clsx-2.x
• Merge into: main
• Upgrade clsx to ^2.0.0

chore(deps): update dependency oauth4webapi to v3

• Schedule: ["every weekday"]
• Branch name: renovate/oauth4webapi-3.x
• Merge into: main
• Upgrade oauth4webapi to ^3.0.0

chore(deps): update dependency react-router-dom to v7

• Schedule: ["every weekday"]
• Branch name: renovate/major-react-router-monorepo
• Merge into: main
• Upgrade react-router-dom to ^7.0.0

chore(deps): update dependency ts-morph to v24

• Schedule: ["every weekday"]
• Branch name: renovate/ts-morph-24.x
• Merge into: main
• Upgrade ts-morph to ^24.0.0

chore(deps): update dependency vite to v6

• Schedule: ["every weekday"]
• Branch name: renovate/vite-6.x
• Merge into: main
• Upgrade vite to ^6.0.0

chore(deps): update module github.com/google/go-github/v56 to v67

• Schedule: ["every weekday"]
• Branch name: renovate/github.com-google-go-github-v56-67.x
• Merge into: main
• Upgrade github.com/google/go-github/v56 to v67.0.0

chore(deps): update module oras.land/oras-go to v2

• Schedule: ["every weekday"]
• Branch name: renovate/oras.land-oras-go-2.x
• Merge into: main
• Upgrade oras.land/oras-go to v2.5.0

chore(deps): update node.js to v23

• Schedule: ["every weekday"]
• Branch name: renovate/docker.io-library-node-23.x
• Merge into: main
• Upgrade docker.io/library/node to sha256:a2fea8b0b74b6e828caa6d83f4b2a0dcb2eb1ff90f30205c32f7bd36ddf976c4

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Renovate Bot.