[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 Renovate will begin keeping your dependencies up-to-date only once you merge or close this Pull Request.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• deploy/compose.setup.yaml (docker-compose)
• deploy/compose.yaml (docker-compose)
• .devcontainer/Dockerfile (dockerfile)
• Dockerfile (dockerfile)
• .github/workflows/publish.yml (github-actions)
• .github/workflows/quality.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• go.mod (gomod)
• tools/go.mod (gomod)
• renovate.json (renovate-config)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs
• Pin Docker digests.
• Pin github-action digests.
• Enable Renovate configuration migration PRs when needed.
• Pin dependency versions for development dependencies.
• Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
• Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds.
• Run lock file maintenance (updates) early Monday mornings.

---

What to Expect

With your current configuration, Renovate will create 10 Pull Requests, up to a maximum of 17 over time (see docs for prConcurrentLimit):

chore(deps): pin debian docker tag to a29215f

• Schedule: ["at any time"]
• Branch name: renovate/pin-dependencies
• Merge into: main
• Upgrade debian to sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f

fix(deps): update github.com/tdewolff/canvas digest to 0980464

• Schedule: ["at any time"]
• Branch name: renovate/github.com-tdewolff-canvas-digest
• Merge into: main
• Upgrade github.com/tdewolff/canvas to 09804640d00c

chore(deps): update module github.com/rhysd/actionlint to v1.7.12

• Schedule: ["at any time"]
• Branch name: renovate/github.com-rhysd-actionlint-1.x
• Merge into: main
• Upgrade github.com/rhysd/actionlint to v1.7.12

fix(deps): update module github.com/go-text/typesetting to v0.3.5

• Schedule: ["at any time"]
• Branch name: renovate/github.com-go-text-typesetting-0.x
• Merge into: main
• Upgrade github.com/go-text/typesetting to v0.3.5

chore(deps): update ghcr.io/tinygo-org/tinygo docker tag to v0.43.0

• Schedule: ["at any time"]
• Branch name: renovate/ghcr.io-tinygo-org-tinygo-0.x
• Merge into: main
• Upgrade ghcr.io/tinygo-org/tinygo to sha256:3470986dbce0b43cc5c590d46b8770f656528bc3e9f29267214d464c0fbbe9c5

chore(deps): update go toolchain directive to v1.27.1

• Schedule: ["at any time"]
• Branch name: renovate/go-1.x
• Merge into: main
• Upgrade go to 1.27.1

chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.14.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-golangci-golangci-lint-v2-2.x
• Merge into: main
• Upgrade github.com/golangci/golangci-lint/v2 to v2.14.0

chore(deps): update module golang.org/x/vuln to v1.8.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-vuln-1.x
• Merge into: main
• Upgrade golang.org/x/vuln to v1.8.0

fix(deps): update module golang.org/x/image to v0.46.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-image-0.x
• Merge into: main
• Upgrade golang.org/x/image to v0.46.0

fix(deps): update module golang.org/x/net to v0.59.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-net-0.x
• Merge into: main
• Upgrade golang.org/x/net to v0.59.0

chore(deps): update actions/checkout action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-7.x
• Merge into: main
• Upgrade actions/checkout to 3d3c42e5aac5ba805825da76410c181273ba90b1

chore(deps): update dependency ubuntu to v26

• Schedule: ["at any time"]
• Branch name: renovate/ubuntu-26.x
• Merge into: main
• Upgrade ubuntu to 26.04

chore(deps): update docker/build-push-action action to v7

• Schedule: ["at any time"]
• Branch name: renovate/docker-build-push-action-7.x
• Merge into: main
• Upgrade docker/build-push-action to c3c9e263c25d99ce0380d002d59b67737d91b0dc

chore(deps): update docker/login-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/docker-login-action-4.x
• Merge into: main
• Upgrade docker/login-action to dbcb813823bdd20940b903addbd779551569679f

chore(deps): update docker/setup-buildx-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/docker-setup-buildx-action-4.x
• Merge into: main
• Upgrade docker/setup-buildx-action to f87e5991a6d7451dcb8d9637bfbc97413f497069

chore(deps): update docker/setup-qemu-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/docker-setup-qemu-action-4.x
• Merge into: main
• Upgrade docker/setup-qemu-action to 99012661954931238ded8c8b007157a8430204e1

chore(deps): update github artifact actions (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: main
• Upgrade actions/download-artifact to 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• Upgrade actions/upload-artifact to 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.