chore: Configure Renovate

[elastic-renovate-prod]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• Dockerfile (dockerfile)
• .github/workflows/codeql-analysis.yml (github-actions)
• .github/workflows/docker.yml (github-actions)
• .github/workflows/go.yml (github-actions)
• .github/workflows/releaser.yml (github-actions)
• .github/workflows/security.yml (github-actions)
• go.mod (gomod)
• samples/bundle-remapper/go.mod (gomod)
• tools/go.mod (gomod)
• Dockerfile (regex)
• Dockerfile (regex)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Chainguard Renovate configuration (https://ela.st/wolfi)
• Chainguard Renovate configuration (https://ela.st/wolfi)
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Pin Docker digests.
• Pin github-action digests.
• Pin dependency versions for devDependencies.
• Preset with best practices from the Renovate maintainers. Recommended for advanced users, who want to follow our best practices.
• Shared Renovate configuration for an out-of-the-box set of defaults for Renovate at Elastic

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 89 Pull Requests:

chore(deps): pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/pin-dependencies
• Merge into: main
• Upgrade AButler/upload-release-assets to ec6d3263266dc57eb6645b5f75e827987f7c217d
• Upgrade Apple-Actions/import-codesign-certs to 253ddeeac23f2bdad1646faac5c8c2832e800071
• Upgrade Zenithar/gh-gomod-generate-sbom to cd97098f01c993f4aa90ccb8aaf6d795d6194898
• Upgrade actions/cache to 30f413bfed0a2bc738fdfd409e5a9e96b24545fd
• Upgrade actions/checkout to f43a0e5ff2bd294095638e18286ca9a3d1956744
• Upgrade actions/setup-go to 6edd4406fa81c3da01a34fa6f6343087c207a568
• Upgrade alpine to sha256:beefdbd8a1da6d2915566fde36db9db0b524eb737fc57cd1367effd16dc0d06d
• Upgrade anchore/sbom-action to 61119d458adab75f756bc0b9e4bde25725f86a7a
• Upgrade autero1/action-gotestsum to 2e48af62f5248bd3b014f598cd1aa69a01dd36e3
• Upgrade docker/build-push-action to 1104d471370f9806843c095c1db02b5a90c5f8b6
• Upgrade docker/login-action to 465a07811f14bebb1938fbed4728c6a1ff8901fc
• Upgrade docker/metadata-action to 818d4b7b91585d195f67373fd9cb0332e31a7175
• Upgrade docker/setup-buildx-action to 885d1462b80bc1c1c7f0b00334ad271f09369c55
• Upgrade docker/setup-qemu-action to 2b82ce82d56a2a04d2637cd93a637ae1b359c0a7
• Upgrade github/codeql-action to 422b177bb3935638109d3175d95e4dbf97066060
• Upgrade golangci/golangci-lint-action to 3a919529898de77ec3da873e3063ca4b10e7f5cc
• Upgrade goreleaser/goreleaser-action to b508e2e3ef3b19d4e4146d4f8fb3ba9db644a757
• Upgrade returntocorp/semgrep-action to 713efdd345f3035192eaa63f56867b88e63e4e5d
• Upgrade sigstore/cosign-installer to 552dc528157845a2e566165f798f3263ce8a986e
• Upgrade sonatype-nexus-community/nancy-github-action to aae196481b961d446f4bff9012e4e3b63d7921a4
• Upgrade styfle/cancel-workflow-action to a40b8845c0683271d9f53dfcb887a7e181d3918b

chore(deps): update gcr.io/projectsigstore/cosign:v1.6.0 docker digest to b667002

• Schedule: ["at any time"]
• Branch name: renovate/gcr.io-projectsigstore-cosign-v1.6.0
• Merge into: main
• Upgrade gcr.io/projectsigstore/cosign to sha256:b667002156c4bf9fedd9273f689b800bb5c341660e710e3bbac981c9795423d9

fix(deps): update github.com/fernet/fernet-go digest to 303da6a

• Schedule: ["at any time"]
• Branch name: renovate/github.com-fernet-fernet-go-digest
• Merge into: main
• Upgrade github.com/fernet/fernet-go to 303da6aec611

fix(deps): update github.com/psanford/memfs digest to 4dbf7e3

• Schedule: ["at any time"]
• Branch name: renovate/github.com-psanford-memfs-digest
• Merge into: main
• Upgrade github.com/psanford/memfs to 4dbf7e3e865e

fix(deps): update google.golang.org/genproto digest to 8af14fe

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-genproto-digest
• Merge into: main
• Upgrade google.golang.org/genproto to 8af14fe29dc1

chore(deps): update sonatype-nexus-community/nancy-github-action action to v1.0.3

• Schedule: ["at any time"]
• Branch name: renovate/sonatype-nexus-community-nancy-github-action-1.x
• Merge into: main
• Upgrade sonatype-nexus-community/nancy-github-action to 726e338312e68ecdd4b4195765f174d3b3ce1533

chore(deps): update zenithar/gh-gomod-generate-sbom action to v1.0.3

• Schedule: ["at any time"]
• Branch name: renovate/zenithar-gh-gomod-generate-sbom-1.x
• Merge into: main
• Upgrade Zenithar/gh-gomod-generate-sbom to 2cdc82f8e362b12fdec116b716ce0130baec8be2

fix(deps): update module github.com/awnumar/memguard to v0.22.5

• Schedule: ["at any time"]
• Branch name: renovate/github.com-awnumar-memguard-0.x
• Merge into: main
• Upgrade github.com/awnumar/memguard to v0.22.5

fix(deps): update module github.com/elastic/go-licenser to v0.4.2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-elastic-go-licenser-0.x
• Merge into: main
• Upgrade github.com/elastic/go-licenser to v0.4.2

fix(deps): update module github.com/go-zookeeper/zk to v1.0.4

• Schedule: ["at any time"]
• Branch name: renovate/github.com-go-zookeeper-zk-1.x
• Merge into: main
• Upgrade github.com/go-zookeeper/zk to v1.0.4

fix(deps): update module github.com/golang/protobuf to v1.5.4

• Schedule: ["at any time"]
• Branch name: renovate/github.com-golang-protobuf-1.x
• Merge into: main
• Upgrade github.com/golang/protobuf to v1.5.4

fix(deps): update module github.com/google/gops to v0.3.28

• Schedule: ["at any time"]
• Branch name: renovate/github.com-google-gops-0.x
• Merge into: main
• Upgrade github.com/google/gops to v0.3.28

fix(deps): update module github.com/imdario/mergo to v0.3.16

• Schedule: ["at any time"]
• Branch name: renovate/github.com-imdario-mergo-0.x
• Merge into: main
• Upgrade github.com/imdario/mergo to v0.3.16

fix(deps): update module github.com/ulikunitz/xz to v0.5.12

• Schedule: ["at any time"]
• Branch name: renovate/github.com-ulikunitz-xz-0.x
• Merge into: main
• Upgrade github.com/ulikunitz/xz to v0.5.12

fix(deps): update module go.etcd.io/etcd/client/v3 to v3.5.16

• Schedule: ["at any time"]
• Branch name: renovate/go.etcd.io-etcd-client-v3-3.x
• Merge into: main
• Upgrade go.etcd.io/etcd/client/v3 to v3.5.16

fix(deps): update module gopkg.in/yaml.v3 to v3.0.1

• Schedule: ["at any time"]
• Branch name: renovate/gopkg.in-yaml.v3-3.x
• Merge into: main
• Upgrade gopkg.in/yaml.v3 to f6f7691b1fdeb513f56608cd2c32c51f8194bf51

chore(deps): update actions/cache action to v3.3.3

• Schedule: ["at any time"]
• Branch name: renovate/actions-cache-3.x
• Merge into: main
• Upgrade actions/cache to e12d46a63a90f2fae62d114769bbf2a179198b5c

chore(deps): update gcr.io/projectsigstore/cosign docker tag to v1.13.6

• Schedule: ["at any time"]
• Branch name: renovate/gcr.io-projectsigstore-cosign-1.x
• Merge into: main
• Upgrade gcr.io/projectsigstore/cosign to sha256:366bf5a7e882e9748e2b05f620258f8eab89ef4e3597001279291a88486c4fdf

chore(deps): update module github.com/containerd/containerd to v1.7.22

• Schedule: ["at any time"]
• Branch name: renovate/github.com-containerd-containerd-1.x
• Merge into: main
• Upgrade github.com/containerd/containerd to v1.7.22

chore(deps): update module github.com/denis-tingaikin/go-header to v0.5.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-denis-tingaikin-go-header-0.x
• Merge into: main
• Upgrade github.com/denis-tingaikin/go-header to v0.5.0

chore(deps): update sigstore/cosign-installer action to v2.8.1

• Schedule: ["at any time"]
• Branch name: renovate/sigstore-cosign-installer-2.x
• Merge into: main
• Upgrade sigstore/cosign-installer to c85d0e205a72a294fe064f618a87dbac13084086

chore(deps): update styfle/cancel-workflow-action action to v0.12.1

• Schedule: ["at any time"]
• Branch name: renovate/styfle-cancel-workflow-action-0.x
• Merge into: main
• Upgrade styfle/cancel-workflow-action to 85880fa0301c86cca9da44039ee3bb12d3bedbfa

fix(deps): update module filippo.io/age to v1.2.0

• Schedule: ["at any time"]
• Branch name: renovate/filippo.io-age-1.x
• Merge into: main
• Upgrade filippo.io/age to v1.2.0

fix(deps): update module filippo.io/edwards25519 to v1.1.0

• Schedule: ["at any time"]
• Branch name: renovate/filippo.io-edwards25519-1.x
• Merge into: main
• Upgrade filippo.io/edwards25519 to v1.1.0

fix(deps): update module github.com/alessio/shellescape to v1.5.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-alessio-shellescape-1.x
• Merge into: main
• Upgrade github.com/alessio/shellescape to v1.5.0

fix(deps): update module github.com/cyclonedx/cyclonedx-gomod to v1.8.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-cyclonedx-cyclonedx-gomod-1.x
• Merge into: main
• Upgrade github.com/CycloneDX/cyclonedx-gomod to v1.8.0

fix(deps): update module github.com/daixiang0/gci to v0.13.5

• Schedule: ["at any time"]
• Branch name: renovate/github.com-daixiang0-gci-0.x
• Merge into: main
• Upgrade github.com/daixiang0/gci to v0.13.5

fix(deps): update module github.com/elastic/harp to v0.2.11

• Schedule: ["at any time"]
• Branch name: renovate/github.com-elastic-harp-0.x
• Merge into: main
• Upgrade github.com/elastic/harp to 186f3992524041fb00bcaa75aa8ea25d9cc6f3ab

fix(deps): update module github.com/fatih/color to v1.17.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-fatih-color-1.x
• Merge into: main
• Upgrade github.com/fatih/color to v1.17.0

fix(deps): update module github.com/golangci/golangci-lint to v1.61.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-golangci-golangci-lint-1.x
• Merge into: main
• Upgrade github.com/golangci/golangci-lint to v1.61.0

fix(deps): update module github.com/google/cel-go to v0.21.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-google-cel-go-0.x
• Merge into: main
• Upgrade github.com/google/cel-go to v0.21.0

fix(deps): update module github.com/google/go-cmp to v0.6.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-google-go-cmp-0.x
• Merge into: main
• Upgrade github.com/google/go-cmp to v0.6.0

fix(deps): update module github.com/google/wire to v0.6.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-google-wire-0.x
• Merge into: main
• Upgrade github.com/google/wire to v0.6.0

fix(deps): update module github.com/gosimple/slug to v1.14.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-gosimple-slug-1.x
• Merge into: main
• Upgrade github.com/gosimple/slug to v1.14.0

fix(deps): update module github.com/hashicorp/consul/api to v1.29.4

• Schedule: ["at any time"]
• Branch name: renovate/github.com-hashicorp-consul-api-1.x
• Merge into: main
• Upgrade github.com/hashicorp/consul/api to v1.29.4

fix(deps): update module github.com/hashicorp/hcl/v2 to v2.22.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-hashicorp-hcl-v2-2.x
• Merge into: main
• Upgrade github.com/hashicorp/hcl/v2 to v2.22.0

fix(deps): update module github.com/hashicorp/vault/api to v1.15.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-hashicorp-vault-api-1.x
• Merge into: main
• Upgrade github.com/hashicorp/vault/api to v1.15.0

fix(deps): update module github.com/iancoleman/strcase to v0.3.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-iancoleman-strcase-0.x
• Merge into: main
• Upgrade github.com/iancoleman/strcase to v0.3.0

fix(deps): update module github.com/klauspost/compress to v1.17.9

• Schedule: ["at any time"]
• Branch name: renovate/github.com-klauspost-compress-1.x
• Merge into: main
• Upgrade github.com/klauspost/compress to v1.17.9

fix(deps): update module github.com/magefile/mage to v1.15.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-magefile-mage-1.x
• Merge into: main
• Upgrade github.com/magefile/mage to v1.15.0

fix(deps): update module github.com/masterminds/semver/v3 to v3.3.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-masterminds-semver-v3-3.x
• Merge into: main
• Upgrade github.com/Masterminds/semver/v3 to v3.3.0

fix(deps): update module github.com/masterminds/sprig/v3 to v3.3.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-masterminds-sprig-v3-3.x
• Merge into: main
• Upgrade github.com/Masterminds/sprig/v3 to v3.3.0

fix(deps): update module github.com/open-policy-agent/opa to v0.68.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-open-policy-agent-opa-0.x
• Merge into: main
• Upgrade github.com/open-policy-agent/opa to v0.68.0

fix(deps): update module github.com/opencontainers/image-spec to v1.1.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-opencontainers-image-spec-1.x
• Merge into: main
• Upgrade github.com/opencontainers/image-spec to v1.1.0

fix(deps): update module github.com/ory/dockertest/v3 to v3.11.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-ory-dockertest-v3-3.x
• Merge into: main
• Upgrade github.com/ory/dockertest/v3 to v3.11.0

fix(deps): update module github.com/sethvargo/go-diceware to v0.4.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-sethvargo-go-diceware-0.x
• Merge into: main
• Upgrade github.com/sethvargo/go-diceware to v0.4.0

fix(deps): update module github.com/sethvargo/go-password to v0.3.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-sethvargo-go-password-0.x
• Merge into: main
• Upgrade github.com/sethvargo/go-password to v0.3.1

fix(deps): update module github.com/spf13/cobra to v1.8.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-spf13-cobra-1.x
• Merge into: main
• Upgrade github.com/spf13/cobra to v1.8.1

fix(deps): update module github.com/spf13/viper to v1.19.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-spf13-viper-1.x
• Merge into: main
• Upgrade github.com/spf13/viper to v1.19.0

fix(deps): update module github.com/stretchr/testify to v1.9.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-stretchr-testify-1.x
• Merge into: main
• Upgrade github.com/stretchr/testify to v1.9.0

fix(deps): update module github.com/zclconf/go-cty to v1.15.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-zclconf-go-cty-1.x
• Merge into: main
• Upgrade github.com/zclconf/go-cty to v1.15.0

fix(deps): update module go.step.sm/crypto to v0.52.0

• Schedule: ["at any time"]
• Branch name: renovate/go.step.sm-crypto-0.x
• Merge into: main
• Upgrade go.step.sm/crypto to v0.52.0

fix(deps): update module go.uber.org/zap to v1.27.0

• Schedule: ["at any time"]
• Branch name: renovate/go.uber.org-zap-1.x
• Merge into: main
• Upgrade go.uber.org/zap to v1.27.0

fix(deps): update module golang.org/x/crypto to v0.27.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-crypto-0.x
• Merge into: main
• Upgrade golang.org/x/crypto to c9da6b9a4008902aae7c754e8f01d42e2d2cf205

fix(deps): update module golang.org/x/oauth2 to v0.23.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-oauth2-0.x
• Merge into: main
• Upgrade golang.org/x/oauth2 to 3e6480915d39dd1a80fa460e56413857f02cc1b9

fix(deps): update module golang.org/x/sync to v0.8.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-sync-0.x
• Merge into: main
• Upgrade golang.org/x/sync to 411f99ef121375a146e962b6eab78b03b7429483

fix(deps): update module golang.org/x/sys to v0.25.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-sys-0.x
• Merge into: main
• Upgrade golang.org/x/sys to a43b625d3c32b5cd2726d132c8478884ae6cb0dc

fix(deps): update module golang.org/x/term to v0.24.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-term-0.x
• Merge into: main
• Upgrade golang.org/x/term to 2f7b0dd7437f43f64ee482c4f85280a4ddad94ed

fix(deps): update module google.golang.org/grpc to v1.66.2

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-grpc-1.x
• Merge into: main
• Upgrade google.golang.org/grpc to v1.66.2

fix(deps): update module google.golang.org/grpc/cmd/protoc-gen-go-grpc to v1.5.1

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-grpc-cmd-protoc-gen-go-grpc-1.x
• Merge into: main
• Upgrade google.golang.org/grpc/cmd/protoc-gen-go-grpc to v1.5.1

fix(deps): update module google.golang.org/protobuf to v1.34.2

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-protobuf-1.x
• Merge into: main
• Upgrade google.golang.org/protobuf to v1.34.2

fix(deps): update module gotest.tools/gotestsum to v1.12.0

• Schedule: ["at any time"]
• Branch name: renovate/gotest.tools-gotestsum-1.x
• Merge into: main
• Upgrade gotest.tools/gotestsum to v1.12.0

fix(deps): update module mvdan.cc/gofumpt to v0.7.0

• Schedule: ["at any time"]
• Branch name: renovate/mvdan.cc-gofumpt-0.x
• Merge into: main
• Upgrade mvdan.cc/gofumpt to v0.7.0

fix(deps): update module oras.land/oras-go to v1.2.6

• Schedule: ["at any time"]
• Branch name: renovate/oras.land-oras-go-1.x
• Merge into: main
• Upgrade oras.land/oras-go to v1.2.6

fix(deps): update module sigs.k8s.io/yaml to v1.4.0

• Schedule: ["at any time"]
• Branch name: renovate/sigs.k8s.io-yaml-1.x
• Merge into: main
• Upgrade sigs.k8s.io/yaml to v1.4.0

fix(deps): update module zntr.io/paseto to v1.3.0

• Schedule: ["at any time"]
• Branch name: renovate/zntr.io-paseto-1.x
• Merge into: main
• Upgrade zntr.io/paseto to v1.3.0

chore(deps): update abutler/upload-release-assets action to v3

• Schedule: ["at any time"]
• Branch name: renovate/abutler-upload-release-assets-3.x
• Merge into: main
• Upgrade AButler/upload-release-assets to 3d6774fae0ed91407dc5ae29d576b166536d1777

chore(deps): update actions/cache action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-cache-4.x
• Merge into: main
• Upgrade actions/cache to 0c45773b623bea8c8e75f6c82b208c3cf94ea4f9

chore(deps): update actions/checkout action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: main
• Upgrade actions/checkout to 692973e3d937129bcbf40652eb9f2f61becf3332

chore(deps): update actions/setup-go action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-5.x
• Merge into: main
• Upgrade actions/setup-go to 0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

chore(deps): update apple-actions/import-codesign-certs action to v3

• Schedule: ["at any time"]
• Branch name: renovate/apple-actions-import-codesign-certs-3.x
• Merge into: main
• Upgrade Apple-Actions/import-codesign-certs to 63fff01cd422d4b7b855d40ca1e9d34d2de9427d

chore(deps): update autero1/action-gotestsum action to v2

• Schedule: ["at any time"]
• Branch name: renovate/autero1-action-gotestsum-2.x
• Merge into: main
• Upgrade autero1/action-gotestsum to 7263b9d73912eec65f46337689e59fac865c425f

chore(deps): update docker/build-push-action action to v6

• Schedule: ["at any time"]
• Branch name: renovate/docker-build-push-action-6.x
• Merge into: main
• Upgrade docker/build-push-action to 5cd11c3a4ced054e52742c5fd54dca954e0edd85

chore(deps): update docker/login-action action to v3

• Schedule: ["at any time"]
• Branch name: renovate/docker-login-action-3.x
• Merge into: main
• Upgrade docker/login-action to 9780b0c442fbb1117ed29e0efdff1e18412f7567

chore(deps): update docker/metadata-action action to v5

• Schedule: ["at any time"]
• Branch name: renovate/docker-metadata-action-5.x
• Merge into: main
• Upgrade docker/metadata-action to 8e5442c4ef9f78752691e2d8f8d19755c6f78e81

chore(deps): update docker/setup-buildx-action action to v3

• Schedule: ["at any time"]
• Branch name: renovate/docker-setup-buildx-action-3.x
• Merge into: main
• Upgrade docker/setup-buildx-action to 988b5a0280414f521da01fcc63a27aeeb4b104db

chore(deps): update docker/setup-qemu-action action to v3

• Schedule: ["at any time"]
• Branch name: renovate/docker-setup-qemu-action-3.x
• Merge into: main
• Upgrade docker/setup-qemu-action to 49b3bc8e6bdd4a60e6116a5414239cba5943d3cf

chore(deps): update gcr.io/projectsigstore/cosign docker tag to v2

• Schedule: ["at any time"]
• Branch name: renovate/gcr.io-projectsigstore-cosign-2.x
• Merge into: main
• Upgrade gcr.io/projectsigstore/cosign to sha256:9d50ceb15f023eda8f58032849eedc0216236d2e2f4cfe1cdf97c00ae7798cfe

chore(deps): update github/codeql-action action to v3

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-3.x
• Merge into: main
• Upgrade github/codeql-action to 294a9d92911152fe08befb9ec03e240add280cb3

chore(deps): update golangci/golangci-lint-action action to v6

• Schedule: ["at any time"]
• Branch name: renovate/golangci-golangci-lint-action-6.x
• Merge into: main
• Upgrade golangci/golangci-lint-action to aaa42aa0628b4ae2578232a66b541047968fac86

chore(deps): update goreleaser/goreleaser-action action to v6

• Schedule: ["at any time"]
• Branch name: renovate/goreleaser-goreleaser-action-6.x
• Merge into: main
• Upgrade goreleaser/goreleaser-action to 286f3b13b1b49da4ac219696163fb8c1c93e1200

chore(deps): update sigstore/cosign-installer action to v3

• Schedule: ["at any time"]
• Branch name: renovate/sigstore-cosign-installer-3.x
• Merge into: main
• Upgrade sigstore/cosign-installer to 4959ce089c160fddf62f7b42464195ba1a56d382

fix(deps): update module github.com/dchest/uniuri to v1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-dchest-uniuri-1.x
• Merge into: main
• Upgrade github.com/dchest/uniuri to a87ec9dce6c59d337a52ec5d0046f2144935a8b7

fix(deps): update module github.com/google/go-github/v42 to v65

• Schedule: ["at any time"]
• Branch name: renovate/github.com-google-go-github-v42-65.x
• Merge into: main
• Upgrade github.com/google/go-github/v42 to v65.0.0

fix(deps): update module github.com/hashicorp/hcl to v2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-hashicorp-hcl-2.x
• Merge into: main
• Upgrade github.com/hashicorp/hcl to v2.22.0

fix(deps): update module github.com/imdario/mergo to v1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-imdario-mergo-1.x
• Merge into: main
• Upgrade github.com/imdario/mergo to v1.0.1

fix(deps): update module github.com/pelletier/go-toml to v2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-pelletier-go-toml-2.x
• Merge into: main
• Upgrade github.com/pelletier/go-toml to v2.2.3

fix(deps): update module github.com/sebdah/goldie to v2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-sebdah-goldie-2.x
• Merge into: main
• Upgrade github.com/sebdah/goldie to v2.5.5

fix(deps): update module oras.land/oras-go to v2

• Schedule: ["at any time"]
• Branch name: renovate/oras.land-oras-go-2.x
• Merge into: main
• Upgrade oras.land/oras-go to v2.5.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Renovate Bot.