chore: Configure Renovate

[renovate-bot]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• cloudbuild.yaml (cloudbuild)
• Dockerfile (dockerfile)
• gae-service-container/Dockerfile (dockerfile)
• .github/workflows/ci.yaml (github-actions)
• go.mod (gomod)
• quickstarttest/go.mod (gomod)
• tf/cloud-functions-gen2/cloud-function.tf (terraform)
• tf/cloud-run/cloud-run.tf (terraform)
• tf/common/main-common.tf (terraform)
• tf/gae-standard/gae-standard.tf (terraform)
• tf/gae/gae.tf (terraform)
• tf/gce/gce.tf (terraform)
• tf/gke/gke.tf (terraform)
• tf/local/local.tf (terraform)
• tf/persistent/repo-ci-triggers.tf (terraform)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 21 Pull Requests:

Update module github.com/docker/docker to v28 [SECURITY]

• Branch name: renovate/go-github.com-docker-docker-vulnerability
• Merge into: main
• Upgrade github.com/docker/docker to v28.0.0+incompatible

Update google.golang.org/genproto/googleapis/rpc digest to ff82c1b

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-genproto-googleapis-rpc-digest
• Merge into: main
• Upgrade google.golang.org/genproto/googleapis/rpc to ff82c1b0f217

Update alpine Docker tag to v3.23

• Schedule: ["at any time"]
• Branch name: renovate/alpine-3.x
• Merge into: main
• Upgrade alpine to 3.23

Update dependency go to 1.25

• Schedule: ["at any time"]
• Branch name: renovate/go-1.x
• Merge into: main
• Upgrade go to 1.25

Update golang Docker tag to v1.25

• Schedule: ["at any time"]
• Branch name: renovate/golang-1.x
• Merge into: main
• Upgrade golang to 1.25

Update module cloud.google.com/go/pubsub to v1.50.1

• Schedule: ["at any time"]
• Branch name: renovate/cloud.google.com-go-pubsub-1.x
• Merge into: main
• Upgrade cloud.google.com/go/pubsub to v1.50.1

Update module cloud.google.com/go/storage to v1.58.0

• Schedule: ["at any time"]
• Branch name: renovate/cloud.google.com-go-storage-1.x
• Merge into: main
• Upgrade cloud.google.com/go/storage to v1.58.0

Update module github.com/alexflint/go-arg to v1.6.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-alexflint-go-arg-1.x
• Merge into: main
• Upgrade github.com/alexflint/go-arg to v1.6.0

Update module github.com/docker/go-connections to v0.6.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-docker-go-connections-0.x
• Merge into: main
• Upgrade github.com/docker/go-connections to v0.6.0

Update module github.com/sethvargo/go-retry to v0.3.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-sethvargo-go-retry-0.x
• Merge into: main
• Upgrade github.com/sethvargo/go-retry to v0.3.0

Update module github.com/stretchr/testify to v1.11.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-stretchr-testify-1.x
• Merge into: main
• Upgrade github.com/stretchr/testify to v1.11.1

Update module golang.org/x/sync to v0.19.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-sync-0.x
• Merge into: main
• Upgrade golang.org/x/sync to v0.19.0

Update module google.golang.org/api to v0.257.0

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-api-0.x
• Merge into: main
• Upgrade google.golang.org/api to v0.257.0

Update Terraform google to v4.85.0

• Schedule: ["at any time"]
• Branch name: renovate/google-4.x
• Merge into: main
• Upgrade google to 4.85.0

Update Terraform kubernetes to v2.38.0

• Schedule: ["at any time"]
• Branch name: renovate/kubernetes-2.x
• Merge into: main
• Upgrade kubernetes to 2.38.0

Update actions/checkout action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to v6

Update actions/setup-go action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-6.x
• Merge into: main
• Upgrade actions/setup-go to v6

Update module cloud.google.com/go/pubsub to v2

• Schedule: ["at any time"]
• Branch name: renovate/cloud.google.com-go-pubsub-2.x
• Merge into: main
• Upgrade cloud.google.com/go/pubsub to v2.3.0

Update Terraform google to v7

• Schedule: ["at any time"]
• Branch name: renovate/google-7.x
• Merge into: main
• Upgrade google to 7.13.0

Update Terraform kubernetes to v3

• Schedule: ["at any time"]
• Branch name: renovate/kubernetes-3.x
• Merge into: main
• Upgrade kubernetes to 3.0.1

Update Terraform terraform-google-modules/container-vm/google to v3

• Schedule: ["at any time"]
• Branch name: renovate/terraform-google-modules-container-vm-google-3.x
• Merge into: main
• Upgrade terraform-google-modules/container-vm/google to 3.2.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.