chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• Dockerfile (dockerfile)
• .github/workflows/codeql-analysis.yml (github-actions)
• .github/workflows/docker-build-push.yml (github-actions)
• .github/workflows/gh-pages.yml (github-actions)
• .github/workflows/go.yml (github-actions)
• go.mod (gomod)
• website/package.json (npm)
• renovate.json (renovate-config-presets)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Pin all dependency versions except peerDependencies.
• Special rules covering major version updates.
• Rules governing github actions.
• Weekly schedule on early Monday mornings (before 4 AM).
• Base Renovate configuration for Expedia Group projects
• Run Renovate on following schedule: * 0-3 * * 1

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 19 Pull Requests:

feat(deps): update module golang.org/x/net from vv0.21.0 to v0.38.0 [security]

• Branch name: renovate/go-golang.org-x-net-vulnerability
• Merge into: main
• Upgrade golang.org/x/net to v0.38.0

chore(deps): pin dependencies

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/pin-dependencies
• Merge into: main
• Pin go to 1.25.5
• Pin go to 1.21.13
• Pin node to 12.22.12

chore(deps): update actions/setup-node action from vv4.0.2 to v4.4.0

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/actions-setup-node-4.x
• Merge into: main
• Upgrade actions/setup-node to v4.4.0

chore(deps): update devdependencies bl from v6.0.12 to v6.1.6

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/bl-6.x
• Merge into: main
• Upgrade bl to 6.1.6

feat(deps): update alpine docker tag to v3.23

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/alpine-3.x
• Merge into: main
• Upgrade alpine to 3.23

feat(deps): update golang docker tag to v1.25

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/golang-1.x
• Merge into: main
• Upgrade golang to 1.25

feat(deps): update module github.com/andybalholm/brotli from vv1.1.0 to v1.2.0

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/github.com-andybalholm-brotli-1.x
• Merge into: main
• Upgrade github.com/andybalholm/brotli to v1.2.0

feat(deps): update module github.com/fullstorydev/grpcurl from vv1.8.9 to v1.9.3

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/github.com-fullstorydev-grpcurl-1.x
• Merge into: main
• Upgrade github.com/fullstorydev/grpcurl to v1.9.3

feat(deps): update module github.com/jhump/protoreflect from vv1.15.6 to v1.17.0

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/github.com-jhump-protoreflect-1.x
• Merge into: main
• Upgrade github.com/jhump/protoreflect to v1.17.0

feat(deps): update module github.com/stretchr/testify from vv1.9.0 to v1.11.1

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/github.com-stretchr-testify-1.x
• Merge into: main
• Upgrade github.com/stretchr/testify to v1.11.1

feat(deps): update module google.golang.org/grpc from vv1.62.0 to v1.77.0

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/google.golang.org-grpc-1.x
• Merge into: main
• Upgrade google.golang.org/grpc to v1.77.0

feat(deps): update uses-with go from v1.21.13 to 1.25

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/go-1.x
• Merge into: main
• Upgrade go to 1.25

chore(deps): update actions/checkout action from vv4 to v6

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to v6

chore(deps): update actions/setup-go action from vv5 to v6

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/actions-setup-go-6.x
• Merge into: main
• Upgrade actions/setup-go to v6

chore(deps): update actions/setup-node action from vv4.0.2 to v6

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/actions-setup-node-6.x
• Merge into: main
• Upgrade actions/setup-node to v6.1.0

chore(deps): update docker/build-push-action action from vv5 to v6

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/docker-build-push-action-6.x
• Merge into: main
• Upgrade docker/build-push-action to v6

chore(deps): update github/codeql-action action from vv3 to v4

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/github-codeql-action-4.x
• Merge into: main
• Upgrade github/codeql-action to v4

chore(deps): update peaceiris/actions-gh-pages action from vv3 to v4

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/peaceiris-actions-gh-pages-4.x
• Merge into: main
• Upgrade peaceiris/actions-gh-pages to v4

feat(deps): update uses-with node from v12.22.12 to v24

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/node-24.x
• Merge into: main
• Upgrade node to 24

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.