chore: Configure Renovate (#214)

Welcome to [Renovate](https://redirect.github.com/renovatebot/renovate)!
This is an onboarding PR to help you understand and configure settings
before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate,
simply close this Pull Request unmerged.



---
### Detected Package Files

 * `Dockerfile` (dockerfile)
 * `.github/workflows/build-push.yaml` (github-actions)
 * `.github/workflows/helm-release.yaml` (github-actions)
 * `.github/workflows/k8s-linters.yaml` (github-actions)
 * `.github/workflows/linters.yaml` (github-actions)
 * `.github/workflows/pr-labeler.yaml` (github-actions)
 * `.github/workflows/release-drafter.yaml` (github-actions)
 * `.github/workflows/tests-secure.yaml` (github-actions)
 * `.github/workflows/tests.yaml` (github-actions)
 * `go.mod` (gomod)
 * `helm/linode-cosi-driver/values.yaml` (helm-values)
* `hack/container-object-storage-controller/kustomization.yaml`
(kustomize)

### Configuration Summary

Based on the default config's presets, Renovate will:

  - Start dependency updates only once this onboarding PR is merged
  - Hopefully safe environment variables to allow users to configure.
  - Show all Merge Confidence badges for pull requests.
  - Enable Renovate Dependency Dashboard creation.
- Use semantic commit type `fix` for dependencies and `chore` for all
others if semantic commits are in use.
- Ignore `node_modules`, `bower_components`, `vendor` and various
test/tests (except for nuget) directories.
  - Group known monorepo packages together.
  - Use curated list of recommended non-monorepo package groupings.
- Show only the Age and Confidence Merge Confidence badges for pull
requests.
  - Apply crowd-sourced package replacement rules.
  - Apply crowd-sourced workarounds for known problems with packages.
- Ensure that every dependency pinned by digest and sourced from
GitHub.com contains a link to the commit-to-commit diff
  - Correctly link to the source code for golang.org/x packages
  - Link to pkg.go.dev/... for golang.org/x packages' title
  - Run Renovate on following schedule: * * * * 0,6

🔡 Do you want to change how Renovate upgrades your dependencies? Add
your custom config to `renovate.json` in this branch. Renovate will
update the Pull Request description the next time it runs.

---

### What to Expect

With your current configuration, Renovate will create 5 Pull Requests:

<details>
<summary>Update dependency
kubernetes-sigs/container-object-storage-interface to v0.2.2</summary>

  - Schedule: ["* * * * 0,6"]
- Branch name:
`renovate/kubernetes-sigs-container-object-storage-interface-0.x`
  - Merge into: `main`
- Upgrade
[kubernetes-sigs/container-object-storage-interface](https://redirect.github.com/kubernetes-sigs/container-object-storage-interface)
to `v0.2.2`


</details>

<details>
<summary>Update docker.io/library/golang Docker tag to v1.25.5</summary>

  - Schedule: ["* * * * 0,6"]
  - Branch name: `renovate/docker.io-library-golang-1.x`
  - Merge into: `main`
  - Upgrade docker.io/library/golang to `1.25.5`


</details>

<details>
<summary>Update gcr.io/k8s-staging-sig-storage/objectstorage-sidecar
Docker tag to v0.2.2</summary>

  - Schedule: ["* * * * 0,6"]
- Branch name:
`renovate/gcr.io-k8s-staging-sig-storage-objectstorage-sidecar-0.x`
  - Merge into: `main`
- Upgrade
[gcr.io/k8s-staging-sig-storage/objectstorage-sidecar](https://redirect.github.com/kubernetes-sigs/container-object-storage-interface)
to `v0.2.2`


</details>

<details>
<summary>Update dependency python to 3.14</summary>

  - Schedule: ["* * * * 0,6"]
  - Branch name: `renovate/python-3.x`
  - Merge into: `main`
- Upgrade [python](https://redirect.github.com/actions/python-versions)
to `3.14`


</details>

<details>
<summary>Update helm/chart-testing-action action to v2.8.0</summary>

  - Schedule: ["* * * * 0,6"]
  - Branch name: `renovate/helm-chart-testing-action-2.x`
  - Merge into: `main`
- Upgrade
[helm/chart-testing-action](https://redirect.github.com/helm/chart-testing-action)
to `v2.8.0`


</details>



🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't
swamp any CI resources or overwhelm the project. See docs for
`prhourlylimit` for details.


---

❓ Got questions? Check out Renovate's
[Docs](https://docs.renovatebot.com/), particularly the Getting Started
section.
If you need any further assistance then you can also [request help
here](https://redirect.github.com/renovatebot/renovate/discussions).


---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/linode/linode-cosi-driver).


<!--renovate-config-hash:2fb9b257c29c91adaea5ac620467d61e266d5ea7b0d2924c6a030c4192a6e069-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Evan <ejohnson@akamai.com>

Author: renovate[bot]

.github/dependabot.yml

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "schedule": [
+    "* * * * 0,6"
+  ],
+  "extends": ["config:recommended"],
+  "labels": ["dependencies"],
+  "postUpdateOptions": ["gomodTidy"],
+  "vulnerabilityAlerts": {
+    "enabled": true
+  },
+  "osvVulnerabilityAlerts": true,
+  "customManagers": [
+    {
+      "customType": "regex",
+      "managerFilePatterns": [
+        "/(^|/)Makefile$/",
+        "/(^|/)makefile$/",
+        "/(^|/)GNUMakefile$/",
+        "/\\.mk$/"
+      ],
+      "matchStrings": [
+        "# renovate: datasource=(?<datasource>[a-zA-Z0-9-._]+?) depName=(?<depName>[^\\s]+?)(?: (?:packageName)=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[^\\s]+?))?(?: extractVersion=(?<extractVersion>[^\\s]+?))?(?: registryUrl=(?<registryUrl>[^\\s]+?))?\\s+[A-Za-z0-9_]+?_VERSION\\s*:*\\??=\\s*[\"']?(?<currentValue>.+?)[\"']?\\s"
+      ]
+    }
+  ],
+  "packageRules": [
+    {
+      "groupName": "go Version",
+      "groupSlug": "go-version",
+      "matchDatasources": [
+        "dockerfile",
+        "golang-version"
+      ]
+    }
+  ]
+}