chore: Configure Renovate (#1)

* Add renovate.json

* Update renovate.json

Signed-off-by: Ying WANG <[email protected]>

* Rename renovate.json to renovate.json5

Signed-off-by: Ying WANG <[email protected]>

* Update renovate.json5

Signed-off-by: Ying WANG <[email protected]>

* Update renovate.json5

Signed-off-by: Ying WANG <[email protected]>

---------

Signed-off-by: Ying WANG <[email protected]>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Ying WANG <[email protected]>

Author: renovate[bot]

renovate.json5

@@ -0,0 +1,42 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:base"
+  ],
+  "baseBranches": ["main", "release-1.20"],
+  "postUpdateOptions": [
+    "gomodTidy",
+    "gomodUpdateImportPaths"
+  ],
+  "schedule": ["before 9am on Monday"],
+  "packageRules": [
+    {
+      "matchBaseBranches": ["release-1.20"],
+      "packagePatterns": ["*"],
+      "enabled": false
+    },
+    // Pin Go at the current version, since we want to upgrade it manually.
+    // Remember to keep this in sync when upgrading our Go version!
+    {
+      "matchDatasources": ["docker", "golang-version"],
+      "matchPackageNames": ["go", "golang"],
+      "allowedVersions": "<=1.22.5"
+    },
+    {
+      "matchManagers": ["gomod"],
+      "matchPaths": ["**/go.mod"],
+      "schedule": ["every month"]
+    },
+    {
+      "matchManagers": ["github-runners"],
+      "schedule": ["every month"],
+      "packagePatterns": ["*"]
+    }
+  ],
+  "branchPrefix": "deps-update/",
+  "vulnerabilityAlerts": {
+    "enabled": true,
+    "labels": ["security-update"]
+  },
+  "osvVulnerabilityAlerts": true
+}