Configure Renovate

[renovate-bot]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• container-diff/WORKSPACE (bazel)
• airflow/cloudbuild.yaml (cloudbuild)
• alcide/cloudbuild.yaml (cloudbuild)
• alcide/example/cloudbuild.yaml (cloudbuild)
• android/cloudbuild.yaml (cloudbuild)
• ansible/cloudbuild.yaml (cloudbuild)
• apt/cloudbuild.yaml (cloudbuild)
• awscli/cloudbuild.yaml (cloudbuild)
• az-kubectl/cloudbuild.yaml (cloudbuild)
• az/cloudbuild.yaml (cloudbuild)
• ballerina/cloudbuild.yaml (cloudbuild)
• bandit/cloudbuild.yaml (cloudbuild)
• base-image-builder/cloudbuild.yaml (cloudbuild)
• binauthz-attestation/cloudbuild.yaml (cloudbuild)
• binauthz-attestation/example/cloudbuild.yaml (cloudbuild)
• bookdown/cloudbuild.yaml (cloudbuild)
• bookdown/example/cloudbuild.yaml (cloudbuild)
• boot/cloudbuild.yaml (cloudbuild)
• bq/cloudbuild.yaml (cloudbuild)
• buildah/cloudbuild.yaml (cloudbuild)
• cache/cloudbuild.yaml (cloudbuild)
• cancelot/cloudbuild.yaml (cloudbuild)
• cargo/cloudbuild.yaml (cloudbuild)
• cdxgen/cloudbuild.yaml (cloudbuild)
• cft/cloudbuild.yaml (cloudbuild)
• compodoc/cloudbuild.yaml (cloudbuild)
• composer/cloudbuild.yaml (cloudbuild)
• container-diff/cloudbuild.yaml (cloudbuild)
• container-diff/example/cloudbuild.yaml (cloudbuild)
• dataflow-python/cloudbuild.yaml (cloudbuild)
• dataflow-python3/cloudbuild.yaml (cloudbuild)
• dataproc-custom-image/cloudbuild.yaml (cloudbuild)
• dep/cloudbuild.yaml (cloudbuild)
• docker-compose/cloudbuild.yaml (cloudbuild)
• docker-reuse/cloudbuild.yaml (cloudbuild)
• dokctl/cloudbuild.yaml (cloudbuild)
• earthly/cloudbuild.yaml (cloudbuild)
• envsubst/cloudbuild.yaml (cloudbuild)
• esy/cloudbuild.yaml (cloudbuild)
• fastlane/cloudbuild.yaml (cloudbuild)
• firebase/cloudbuild.yaml (cloudbuild)
• flutter/cloudbuild.yaml (cloudbuild)
• fsharp/cloudbuild.yaml (cloudbuild)
• gcloud-sops/cloudbuild.yaml (cloudbuild)
• gcluster/cloudbuild.yaml (cloudbuild)
• git-lfs/cloudbuild.yaml (cloudbuild)
• github/cloudbuild.yaml (cloudbuild)
• glide/cloudbuild.yaml (cloudbuild)
• google-closure-compiler/cloudbuild.yaml (cloudbuild)
• harness-chaos/cloudbuild.yaml (cloudbuild)
• helm/cloudbuild.yaml (cloudbuild)
• helmfile/cloudbuild.yaml (cloudbuild)
• hub/cloudbuild.yaml (cloudbuild)
• hugo/cloudbuild.yaml (cloudbuild)
• hugo/example/cloudbuild.yaml (cloudbuild)
• inspec/cloudbuild.yaml (cloudbuild)
• jfrog/cloudbuild.yaml (cloudbuild)
• jmeter/cloudbuild.yaml (cloudbuild)
• jsonnet/cloudbuild.yaml (cloudbuild)
• kaniko/cloudbuild.yaml (cloudbuild)
• klar/cloudbuild.yaml (cloudbuild)
• ko/cloudbuild.yaml (cloudbuild)
• kondunite/cloudbuild.yaml (cloudbuild)
• kubectl_wait_for_job/cloudbuild.yaml (cloudbuild)
• kustomize/cloudbuild.yaml (cloudbuild)
• make/cloudbuild.yaml (cloudbuild)
• makisu/cloudbuild.yaml (cloudbuild)
• mortar/cloudbuild.yaml (cloudbuild)
• ng/cloudbuild.yaml (cloudbuild)
• nix-build/cloudbuild.yaml (cloudbuild)
• npm-cli-package/cloudbuild.yaml (cloudbuild)
• npm-jasmine-node/cloudbuild.yaml (cloudbuild)
• octokit/cloudbuild.yaml (cloudbuild)
• opa/cloudbuild.yaml (cloudbuild)
• pack/cloudbuild.yaml (cloudbuild)
• pack/example/cloudbuild.yaml (cloudbuild)
• packer/cloudbuild.yaml (cloudbuild)
• pelican/cloudbuild.yaml (cloudbuild)
• protoc/cloudbuild.yaml (cloudbuild)
• pub/cloudbuild.yaml (cloudbuild)
• pulumi/cloudbuild.yaml (cloudbuild)
• puppet-lint/cloudbuild.yaml (cloudbuild)
• pylint/cloudbuild.yaml (cloudbuild)
• pypi-tools/cloudbuild.yaml (cloudbuild)
• remote-builder/cloudbuild.yaml (cloudbuild)
• replicated-cli/cloudbuild.yaml (cloudbuild)
• replicated-lint/cloudbuild.yaml (cloudbuild)
• rocker/cloudbuild.yaml (cloudbuild)
• rsync/cloudbuild.yaml (cloudbuild)
• s2i/cloudbuild.yaml (cloudbuild)
• sast-scan/cloudbuild.yaml (cloudbuild)
• scala-sbt/cloudbuild.yaml (cloudbuild)
• shellcheck/cloudbuild.yaml (cloudbuild)
• singularity/cloudbuild.yaml (cloudbuild)
• skaffold/cloudbuild.yaml (cloudbuild)
• slackbot/cloudbuild.yaml (cloudbuild)
• sonarqube/cloudbuild.yaml (cloudbuild)
• state/cloudbuild.yaml (cloudbuild)
• swift/cloudbuild.yaml (cloudbuild)
• tar/cloudbuild.yaml (cloudbuild)
• terraform/cloudbuild.yaml (cloudbuild)
• terragrunt/cloudbuild.yaml (cloudbuild)
• traceroute/cloudbuild.yaml (cloudbuild)
• trivy/cloudbuild.yaml (cloudbuild)
• vault/cloudbuild.yaml (cloudbuild)
• velero/cloudbuild.yaml (cloudbuild)
• webdev/cloudbuild.yaml (cloudbuild)
• windows-builder/builder/cloudbuild.yaml (cloudbuild)
• windows-builder/images/docker-windows/cloudbuild.yaml (cloudbuild)
• windows-builder/images/example/cloudbuild.yaml (cloudbuild)
• windows-builder/images/go-example/cloudbuild.yaml (cloudbuild)
• windows-builder/images/go-windows/cloudbuild.yaml (cloudbuild)
• windows-builder/images/multi-arch_1909_2019/cloudbuild.yaml (cloudbuild)
• wrangler/cloudbuild.yaml (cloudbuild)
• yarn-puppeteer/cloudbuild.yaml (cloudbuild)
• zip/cloudbuild.yaml (cloudbuild)
• zola/cloudbuild.yaml (cloudbuild)
• zola/example/cloudbuild.yaml (cloudbuild)
• airflow/Dockerfile (dockerfile)
• alcide/Dockerfile (dockerfile)
• android/Dockerfile-base (dockerfile)
• android/Dockerfile-ndk (dockerfile)
• android/Dockerfile-sdk (dockerfile)
• ansible/Dockerfile (dockerfile)
• apt/Dockerfile (dockerfile)
• awscli/Dockerfile (dockerfile)
• az-kubectl/Dockerfile (dockerfile)
• az/Dockerfile (dockerfile)
• ballerina/Dockerfile (dockerfile)
• bandit/Dockerfile (dockerfile)
• base-image-builder/Dockerfile (dockerfile)
• binauthz-attestation/Dockerfile (dockerfile)
• binauthz-attestation/example/Dockerfile (dockerfile)
• bookdown/Dockerfile (dockerfile)
• boot/Dockerfile (dockerfile)
• bq/Dockerfile (dockerfile)
• buildah/Dockerfile (dockerfile)
• buildah/Dockerfile.sample (dockerfile)
• cache/Dockerfile-base (dockerfile)
• cache/Dockerfile-restore (dockerfile)
• cache/Dockerfile-save (dockerfile)
• cancelot/Dockerfile (dockerfile)
• cargo/Dockerfile (dockerfile)
• cdxgen/Dockerfile (dockerfile)
• cft/Dockerfile (dockerfile)
• compodoc/Dockerfile (dockerfile)
• composer/Dockerfile (dockerfile)
• container-diff/example/Dockerfile (dockerfile)
• dataflow-python/Dockerfile (dockerfile)
• dataflow-python3/Dockerfile (dockerfile)
• dataproc-custom-image/Dockerfile (dockerfile)
• dep/Dockerfile (dockerfile)
• docker-compose/Dockerfile (dockerfile)
• docker-reuse/Dockerfile (dockerfile)
• dokctl/Dockerfile (dockerfile)
• earthly/Dockerfile (dockerfile)
• envsubst/Dockerfile (dockerfile)
• esy/Dockerfile (dockerfile)
• fastlane/Dockerfile (dockerfile)
• firebase/Dockerfile (dockerfile)
• flutter/Dockerfile (dockerfile)
• fsharp/Dockerfile (dockerfile)
• gcloud-sops/Dockerfile (dockerfile)
• gcluster/Dockerfile (dockerfile)
• git-lfs/Dockerfile (dockerfile)
• github/Dockerfile (dockerfile)
• glide/Dockerfile (dockerfile)
• google-closure-compiler/Dockerfile (dockerfile)
• harness-chaos/Dockerfile (dockerfile)
• helm/Dockerfile (dockerfile)
• helmfile/Dockerfile (dockerfile)
• hub/Dockerfile (dockerfile)
• hugo/Dockerfile (dockerfile)
• inspec/Dockerfile (dockerfile)
• jfrog/Dockerfile (dockerfile)
• jmeter/Dockerfile (dockerfile)
• jsonnet/Dockerfile (dockerfile)
• kaniko/Dockerfile (dockerfile)
• klar/Dockerfile (dockerfile)
• ko/Dockerfile (dockerfile)
• kondunite/Dockerfile (dockerfile)
• kubectl_wait_for_job/Dockerfile (dockerfile)
• kustomize/Dockerfile (dockerfile)
• make/Dockerfile (dockerfile)
• makisu/Dockerfile (dockerfile)
• mortar/Dockerfile (dockerfile)
• ng/Dockerfile (dockerfile)
• nix-build/Dockerfile (dockerfile)
• npm-cli-package/Dockerfile (dockerfile)
• npm-jasmine-node/Dockerfile (dockerfile)
• octokit/Dockerfile (dockerfile)
• opa/Dockerfile (dockerfile)
• pack/Dockerfile (dockerfile)
• packer/Dockerfile (dockerfile)
• pelican/Dockerfile (dockerfile)
• protoc/Dockerfile (dockerfile)
• pub/Dockerfile (dockerfile)
• pulumi/Dockerfile (dockerfile)
• puppet-lint/Dockerfile (dockerfile)
• pylint/Dockerfile (dockerfile)
• pypi-tools/Dockerfile (dockerfile)
• remote-builder/Dockerfile (dockerfile)
• replicated-cli/Dockerfile (dockerfile)
• replicated-lint/Dockerfile (dockerfile)
• rocker/Dockerfile (dockerfile)
• rsync/Dockerfile (dockerfile)
• s2i/Dockerfile (dockerfile)
• sast-scan/Dockerfile (dockerfile)
• scala-sbt/Dockerfile (dockerfile)
• shellcheck/Dockerfile (dockerfile)
• singularity/Dockerfile (dockerfile)
• skaffold/Dockerfile (dockerfile)
• slackbot/Dockerfile (dockerfile)
• sonarqube/Dockerfile (dockerfile)
• state/Dockerfile (dockerfile)
• swift/Dockerfile (dockerfile)
• swift/Dockerfile_4-2 (dockerfile)
• swift/Dockerfile_dev (dockerfile)
• tar/Dockerfile (dockerfile)
• terraform/Dockerfile (dockerfile)
• terragrunt/Dockerfile (dockerfile)
• traceroute/Dockerfile (dockerfile)
• trivy/Dockerfile (dockerfile)
• vault/Dockerfile (dockerfile)
• velero/Dockerfile (dockerfile)
• webdev/Dockerfile (dockerfile)
• windows-builder/builder/Dockerfile (dockerfile)
• windows-builder/images/docker-windows/Dockerfile (dockerfile)
• windows-builder/images/go-example/Dockerfile (dockerfile)
• windows-builder/images/go-windows/Dockerfile (dockerfile)
• windows-builder/images/multi-arch_1909_2019/Dockerfile (dockerfile)
• wrangler/Dockerfile (dockerfile)
• yarn-puppeteer/Dockerfile (dockerfile)
• zip/Dockerfile (dockerfile)
• zola/Dockerfile (dockerfile)
• pack/example/go.mod (gomod)
• slackbot/go.mod (gomod)
• windows-builder/builder/go.mod (gomod)
• octokit/package.json (npm)
• airflow/requirements.txt (pip_requirements)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 39 Pull Requests:

chore(deps): update dependency werkzeug to v3.1.5 [security]

• Branch name: renovate/pypi-werkzeug-vulnerability
• Merge into: master
• Upgrade werkzeug to ==3.1.5

chore(deps): update io_bazel_rules_docker digest to 0e9c3b0

• Schedule: ["at any time"]
• Branch name: renovate/io_bazel_rules_docker-digest
• Merge into: master
• Upgrade io_bazel_rules_docker to 0e9c3b068d05f20adf7ccdea486fcb27e71593f3

fix(deps): update github.com/masterzen/winrm digest to 5f8e6c7

• Schedule: ["at any time"]
• Branch name: renovate/github.com-masterzen-winrm-digest
• Merge into: master
• Upgrade github.com/masterzen/winrm to 5f8e6c707321

fix(deps): update github.com/packer-community/winrmcp digest to 6e900dd

• Schedule: ["at any time"]
• Branch name: renovate/github.com-packer-community-winrmcp-digest
• Merge into: master
• Upgrade github.com/packer-community/winrmcp to 6e900dd2c68f

fix(deps): update google.golang.org/genproto digest to 0a764e5

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-genproto-digest
• Merge into: master
• Upgrade google.golang.org/genproto to 0a764e51fe1b

chore(deps): update dependency nodemon to v2.0.22

• Schedule: ["at any time"]
• Branch name: renovate/nodemon-2.x-lockfile
• Merge into: master
• Upgrade nodemon to 2.0.22

fix(deps): update module github.com/pborman/uuid to v1.2.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-pborman-uuid-1.x
• Merge into: master
• Upgrade github.com/pborman/uuid to v1.2.1

chore(deps): update alpine docker tag to v3.23

• Schedule: ["at any time"]
• Branch name: renovate/alpine-3.x
• Merge into: master
• Upgrade alpine to 3.23

chore(deps): update chef/inspec docker tag to v3.9.11

• Schedule: ["at any time"]
• Branch name: renovate/chef-inspec-3.x
• Merge into: master
• Upgrade chef/inspec to 3.9.11

chore(deps): update dependency @google-cloud/secret-manager to v3.12.0

• Schedule: ["at any time"]
• Branch name: renovate/google-cloud-secret-manager-3.x-lockfile
• Merge into: master
• Upgrade @google-cloud/secret-manager to 3.12.0

chore(deps): update dependency @​types/node to v14.18.63

• Schedule: ["at any time"]
• Branch name: renovate/node-14.x-lockfile
• Merge into: master
• Upgrade @types/node to 14.18.63

chore(deps): update dependency typescript to v4.9.5

• Schedule: ["at any time"]
• Branch name: renovate/typescript-4.x-lockfile
• Merge into: master
• Upgrade typescript to 4.9.5

chore(deps): update golang docker tag

• Schedule: ["at any time"]
• Branch name: renovate/golang-1.x
• Merge into: master
• Upgrade golang to 1.25
• Upgrade golang to 1.25-alpine
• Upgrade golang to 1.25.5-bookworm

chore(deps): update octokit monorepo

• Schedule: ["at any time"]
• Branch name: renovate/octokit-monorepo
• Merge into: master
• Upgrade @octokit/app to 14.1.0
• Upgrade @octokit/auth-app to 2.11.0
• Upgrade @octokit/auth-token to 2.5.0
• Upgrade @octokit/rest to 18.12.0

chore(deps): update openpolicyagent/opa docker tag to v0.70.0

• Schedule: ["at any time"]
• Branch name: renovate/openpolicyagent-opa-0.x
• Merge into: master
• Upgrade openpolicyagent/opa to 0.70.0

chore(deps): update redhat/ubi8-minimal docker tag to v8.10-1766090732

• Schedule: ["at any time"]
• Branch name: renovate/redhat-ubi8-minimal-8.x
• Merge into: master
• Upgrade redhat/ubi8-minimal to 8.10-1766090732

chore(deps): update ruby docker tag to v2.7.8

• Schedule: ["at any time"]
• Branch name: renovate/ruby-2.x
• Merge into: master
• Upgrade ruby to 2.7.8-alpine

fix(deps): update module cloud.google.com/go to v0.123.0

• Schedule: ["at any time"]
• Branch name: renovate/cloud.google.com-go-0.x
• Merge into: master
• Upgrade cloud.google.com/go to v0.123.0

fix(deps): update module cloud.google.com/go/storage to v1.58.0

• Schedule: ["at any time"]
• Branch name: renovate/cloud.google.com-go-storage-1.x
• Merge into: master
• Upgrade cloud.google.com/go/storage to v1.58.0

fix(deps): update module golang.org/x/oauth2 to v0.34.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-oauth2-0.x
• Merge into: master
• Upgrade golang.org/x/oauth2 to acc38155b7f6f36aefcb58faff6f36d314dd915c

fix(deps): update module google.golang.org/api to v0.259.0

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-api-0.x
• Merge into: master
• Upgrade google.golang.org/api to v0.259.0

chore(deps): update chef/inspec docker tag to v6

• Schedule: ["at any time"]
• Branch name: renovate/chef-inspec-6.x
• Merge into: master
• Upgrade chef/inspec to 6.4.34

chore(deps): update debian docker tag to v13

• Schedule: ["at any time"]
• Branch name: renovate/debian-13.x
• Merge into: master
• Upgrade debian to trixie

chore(deps): update dependency nodemon to v3

• Schedule: ["at any time"]
• Branch name: renovate/nodemon-3.x
• Merge into: master
• Upgrade nodemon to ^3.0.0

chore(deps): update dependency rimraf to v6

• Schedule: ["at any time"]
• Branch name: renovate/rimraf-6.x
• Merge into: master
• Upgrade rimraf to ^6.0.0

chore(deps): update dependency rollup to v4

• Schedule: ["at any time"]
• Branch name: renovate/rollup-4.x
• Merge into: master
• Upgrade rollup to ^4.0.0

chore(deps): update dependency ts-node to v10

• Schedule: ["at any time"]
• Branch name: renovate/ts-node-10.x
• Merge into: master
• Upgrade ts-node to ^10.0.0

chore(deps): update dependency typescript to v5

• Schedule: ["at any time"]
• Branch name: renovate/typescript-5.x
• Merge into: master
• Upgrade typescript to ^5.0.0

chore(deps): update fsharp docker tag to v10

• Schedule: ["at any time"]
• Branch name: renovate/fsharp-10.x
• Merge into: master
• Upgrade fsharp to 10.10.0

chore(deps): update mcr.microsoft.com/windows/servercore docker tag to v2009

• Schedule: ["at any time"]
• Branch name: renovate/mcr.microsoft.com-windows-servercore-2009.x
• Merge into: master
• Upgrade mcr.microsoft.com/windows/servercore to 2009

chore(deps): update node.js to v24

• Schedule: ["at any time"]
• Branch name: renovate/node-24.x
• Merge into: master
• Upgrade node to 24.12.0-alpine
• Upgrade @types/node to ^24.0.0

chore(deps): update openjdk docker tag to v25

• Schedule: ["at any time"]
• Branch name: renovate/openjdk-25.x
• Merge into: master
• Upgrade openjdk to 25
• Upgrade openjdk to 25-jdk-slim

chore(deps): update openpolicyagent/opa docker tag to v1

• Schedule: ["at any time"]
• Branch name: renovate/openpolicyagent-opa-1.x
• Merge into: master
• Upgrade openpolicyagent/opa to 1.12.2

chore(deps): update python docker tag

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: master
• Upgrade python to 3.14-alpine
• Upgrade python to 3.14
• Upgrade python to 3

chore(deps): update ruby docker tag to v4

• Schedule: ["at any time"]
• Branch name: renovate/ruby-4.x
• Merge into: master
• Upgrade ruby to 4.0.0-alpine

chore(deps): update swift docker tag to v6

• Schedule: ["at any time"]
• Branch name: renovate/swift-6.x
• Merge into: master
• Upgrade swift to 6.2

chore(deps): update ubuntu docker tag to v24

• Schedule: ["at any time"]
• Branch name: renovate/ubuntu-24.x
• Merge into: master
• Upgrade ubuntu to 24.04
• Upgrade ubuntu to noble

fix(deps): update dependency @google-cloud/secret-manager to v6

• Schedule: ["at any time"]
• Branch name: renovate/google-cloud-secret-manager-6.x
• Merge into: master
• Upgrade @google-cloud/secret-manager to ^6.0.0

fix(deps): update octokit monorepo (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-octokit-monorepo
• Merge into: master
• Upgrade @octokit/app to ^16.0.0
• Upgrade @octokit/auth-app to ^8.0.0
• Upgrade @octokit/auth-token to ^6.0.0
• Upgrade @octokit/rest to ^22.0.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up docker package gcr.io/makisu-project/makisu
• Failed to look up docker package microsoft/windowsservercore

Files affected: makisu/cloudbuild.yaml, windows-builder/images/docker-windows/Dockerfile

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.