chore: standardize repository files (#53)

Author: cainelli

.github/dependabot.yml

@@ -1,16 +1,55 @@
+# File managed by getyourguide/k8s-tools
 version: 2
+registries:
+  docker-registry-130607246975-dkr-ecr-eu-central-1-amazonaws-com:
+    type: docker-registry
+    url: https://130607246975.dkr.ecr.eu-central-1.amazonaws.com
+    username: "${{ secrets.DOCKER_REGISTRY_130607246975_DKR_ECR_EU_CENTRAL_1_AMAZONAWS_COM_USERNAME }}"
+    password: "${{ secrets.DOCKER_REGISTRY_130607246975_DKR_ECR_EU_CENTRAL_1_AMAZONAWS_COM_PASSWORD }}"
+  docker-registry-890546402176-dkr-ecr-eu-central-1-amazonaws-com:
+    type: docker-registry
+    url: https://890546402176.dkr.ecr.eu-central-1.amazonaws.com
+    username: "${{ secrets.DOCKER_REGISTRY_890546402176_DKR_ECR_EU_CENTRAL_1_AMAZONAWS_COM_USERNAME }}"
+    password: "${{ secrets.DOCKER_REGISTRY_890546402176_DKR_ECR_EU_CENTRAL_1_AMAZONAWS_COM_PASSWORD }}"
 updates:
+  - package-ecosystem: docker
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+      time: "13:00"
+      timezone: Europe/Berlin
+    registries:
+      - docker-registry-890546402176-dkr-ecr-eu-central-1-amazonaws-com
+      - docker-registry-130607246975-dkr-ecr-eu-central-1-amazonaws-com
   - package-ecosystem: github-actions
     directory: /
     schedule:
       interval: weekly
-      day: sunday
+      day: monday
+      time: "13:00"
       timezone: Europe/Berlin
-    open-pull-requests-limit: 5
+    open-pull-requests-limit: 10
+    cooldown:
+      default-days: 10
+      exclude:
+        - getyourguide/*
   - package-ecosystem: gomod
-    open-pull-requests-limit: 0 # only enable security updates
     directory: /
     schedule:
       interval: weekly
-      day: wednesday
+      day: monday
+      time: "13:00"
       timezone: Europe/Berlin
+    groups:
+      01_minor-versions:
+        update-types:
+          - minor
+          - patch
+    cooldown:
+      semver-major-days: 21
+      semver-minor-days: 7
+      semver-patch-days: 3
+      default-days: 10
+      exclude:
+        - '*getyourguide*'

.github/renovate.json

@@ -0,0 +1,28 @@
+# File managed by getyourguide/k8s-tools
+name: auto-approve
+on: pull_request
+
+concurrency:
+  group: ${{ github.workflow }}${{ github.ref_name != github.event.repository.default_branch && github.ref || github.run_id }}
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
+permissions:
+  pull-requests: write
+  contents: write
+
+jobs:
+  auto-approve:
+    runs-on: [self-hosted, go-small]
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    steps:
+      - name: Approve Dependabot PR
+        run: gh pr review --approve "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GITHUB_TOKEN: ${{ secrets.GYGROBOT_WRITE_TOKEN }}
+
+      - name: auto-merge Dependabot PR
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GITHUB_TOKEN: ${{ secrets.GYGROBOT_WRITE_TOKEN }}

.github/workflows/auto-approve.yml

@@ -11,6 +11,12 @@ permissions:
   id-token: write
 
 jobs:
+  ci-required:
+    runs-on: [self-hosted, go-large]
+    needs: [test]
+    if: success()
+    steps:
+      - run: echo "Required checks passed"
   test:
     runs-on: [ubuntu-latest]
     steps:

.github/workflows/build-and-test.yaml

@@ -1,29 +1,7 @@
 version: "2"
 linters:
-  default: none
-  enable:
-    - errcheck
-    - govet
-    - ineffassign
-    - staticcheck
-    - unused
   exclusions:
-    generated: lax
-    presets:
-      - comments
-      - common-false-positives
-      - legacy
-      - std-error-handling
-    paths:
-      - third_party$
-      - builtin$
-      - examples$
-formatters:
-  enable:
-    - gofumpt
-  exclusions:
-    generated: lax
-    paths:
-      - third_party$
-      - builtin$
-      - examples$
+    rules:
+      - path: .+
+        linters:
+          - errcheck