chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• Dockerfile (dockerfile)
• .github/workflows/build.yml (github-actions)
• .github/workflows/test.yml (github-actions)
• go.mod (gomod)
• deploy/jsonnetfile.json (jsonnet-bundler)
• deploy/kube-prometheus/jsonnetfile.json (jsonnet-bundler)
• renovate.json (renovate-config-presets)
• env-jsonnet.sh (regex)
• env.sh (regex)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Pin Docker digests.
• Pin github-action digests.
• Enable Renovate configuration migration PRs when needed.
• Pin dependency versions for development dependencies.
• Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
• Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds.
• Automerge digest upgrades if they pass tests.
• Automerge patch and minor upgrades if they pass tests.
• Enable the pre-commit manager.
• Run lock file maintenance (updates) early Monday mornings.
• Rebase existing PRs any time the base branch has been updated.
• Use semantic prefixes for commit messages and PR titles.
• Use semantic commit scope deps for all commits and PR titles.
• Convert pinned GitHub Action digests to SemVer.
• Update _VERSION variables in Dockerfiles.
• Update _VERSION environment variables in GitHub Action files.
• Default preset for use with Parca's repos
• Onboarding preset for use with Parca's repos

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 43 Pull Requests:

build(deps): pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/pin-dependencies
• Merge into: main
• Upgrade actions/checkout to 34e114876b0b11c390a56381ad16ebd13914f8d5
• Upgrade actions/download-artifact to d3f86a106a0bac45b974a628896c90dbdf5c8093
• Upgrade actions/setup-go to 40f1582b2485089dde7abd97c1529aa768e1baff
• Upgrade actions/upload-artifact to ea165f8d65b6e75b540449e92b4886f43607fa02
• Upgrade canonical/setup-lxd to 4e959f8e0d9c5feb27d44c5e4d9a330a782edee0
• Upgrade cgr.dev/chainguard/static to sha256:a301031ffd4ed67f35ca7fa6cf3dad9937b5fa47d7493955a18d9b4ca5412d1a
• Upgrade docker.io/goreleaser/goreleaser-cross to sha256:2343e359591570cacc96599f5a70197eb4b008edf58ef6e5725c26cc32e6f258
• Upgrade softprops/action-gh-release to de2c0eb89ae2a093876385947365aca7b0e5f844

build(deps): update golang.org/x/exp digest to 8475f28

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/golang.org-x-exp-digest
• Merge into: main
• Upgrade golang.org/x/exp to 8475f28825e9

build(deps): update module buf.build/gen/go/parca-dev/parca/protocolbuffers/go to v1.36.11-20251203114737-dab2f094ec25.1

• Schedule: ["at any time"]
• Branch name: renovate/buf.build-gen-go-parca-dev-parca-protocolbuffers-go-1.x
• Merge into: main
• Upgrade buf.build/gen/go/parca-dev/parca/protocolbuffers/go to dab2f094ec25

build(deps): update module buf.build/gen/go/prometheus/prometheus/protocolbuffers/go to v1.36.11-20251118093737-4105057cc7d4.1

• Schedule: ["at any time"]
• Branch name: renovate/buf.build-gen-go-prometheus-prometheus-protocolbuffers-go-1.x
• Merge into: main
• Upgrade buf.build/gen/go/prometheus/prometheus/protocolbuffers/go to 4105057cc7d4

build(deps): update module github.com/grpc-ecosystem/go-grpc-middleware/v2 to v2.3.3

• Schedule: ["at any time"]
• Branch name: renovate/github.com-grpc-ecosystem-go-grpc-middleware-v2-2.x
• Merge into: main
• Upgrade github.com/grpc-ecosystem/go-grpc-middleware/v2 to v2.3.3

build(deps): update module github.com/kimmachinegun/automemlimit to v0.7.5

• Schedule: ["at any time"]
• Branch name: renovate/github.com-kimmachinegun-automemlimit-0.x
• Merge into: main
• Upgrade github.com/KimMachineGun/automemlimit to v0.7.5

build(deps): update module github.com/klauspost/compress to v1.18.2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-klauspost-compress-1.x
• Merge into: main
• Upgrade github.com/klauspost/compress to v1.18.2

build(deps): update module go.opentelemetry.io/ebpf-profiler to v0.0.202549

• Schedule: ["at any time"]
• Branch name: renovate/go.opentelemetry.io-ebpf-profiler-0.x
• Merge into: main
• Upgrade go.opentelemetry.io/ebpf-profiler to 19cb11e6bf00c04e4f8d793e944e71478f9608d9

build(deps): update module google.golang.org/protobuf to v1.36.10

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-protobuf-1.x
• Merge into: main
• Upgrade google.golang.org/protobuf to v1.36.10

chore(deps): update canonical/setup-lxd action to v0.1.3

• Schedule: ["at any time"]
• Branch name: renovate/canonical-setup-lxd-0.x
• Merge into: main
• Upgrade canonical/setup-lxd to a3c85fc6fb7fff43fcfeae87659e41a8f635b7dd

chore(deps): update module github.com/parca-dev/opentelemetry-ebpf-profiler to v0.0.202549

• Schedule: ["at any time"]
• Branch name: renovate/github.com-parca-dev-opentelemetry-ebpf-profiler-0.x
• Merge into: main
• Upgrade github.com/parca-dev/opentelemetry-ebpf-profiler to 15b764f142cf4a105a1625301235a9e70e284b86

chore(deps): update module golang.org/x/vuln to v1.1.4

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-vuln-1.x
• Merge into: main
• Upgrade golang.org/x/vuln to v1.1.4

build(deps): update kubernetes to v0.34.3

• Schedule: ["at any time"]
• Branch name: renovate/kubernetes
• Merge into: main
• Upgrade k8s.io/apimachinery to v0.34.3
• Upgrade k8s.io/client-go to v0.34.3
• Upgrade k8s.io/cri-api to v0.34.3
• Upgrade k8s.io/cri-client to v0.34.3

build(deps): update module buf.build/gen/go/parca-dev/parca/grpc/go to v1.6.0-20251203114737-dab2f094ec25.1

• Schedule: ["at any time"]
• Branch name: renovate/buf.build-gen-go-parca-dev-parca-grpc-go-1.x
• Merge into: main
• Upgrade buf.build/gen/go/parca-dev/parca/grpc/go to dab2f094ec25

build(deps): update module github.com/alecthomas/kong to v1.13.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-alecthomas-kong-1.x
• Merge into: main
• Upgrade github.com/alecthomas/kong to v1.13.0

build(deps): update module github.com/docker/docker to v28.5.2+incompatible

• Schedule: ["at any time"]
• Branch name: renovate/github.com-docker-docker-28.x
• Merge into: main
• Upgrade github.com/docker/docker to v28.5.2+incompatible

build(deps): update module github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus to v1.1.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-grpc-ecosystem-go-grpc-middleware-providers-prometheus-1.x
• Merge into: main
• Upgrade github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus to v1.1.0

build(deps): update module github.com/prometheus/client_golang to v1.23.2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-prometheus-client_golang-1.x
• Merge into: main
• Upgrade github.com/prometheus/client_golang to v1.23.2

build(deps): update module github.com/prometheus/common to v0.67.4

• Schedule: ["at any time"]
• Branch name: renovate/github.com-prometheus-common-0.x
• Merge into: main
• Upgrade github.com/prometheus/common to v0.67.4

build(deps): update module github.com/prometheus/prometheus to v0.308.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-prometheus-prometheus-0.x
• Merge into: main
• Upgrade github.com/prometheus/prometheus to v0.308.0

build(deps): update module github.com/tklauser/numcpus to v0.11.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-tklauser-numcpus-0.x
• Merge into: main
• Upgrade github.com/tklauser/numcpus to v0.11.0

build(deps): update module golang.org/x/sync to v0.19.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-sync-0.x
• Merge into: main
• Upgrade golang.org/x/sync to v0.19.0

build(deps): update module golang.org/x/sys to v0.39.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-sys-0.x
• Merge into: main
• Upgrade golang.org/x/sys to v0.39.0

build(deps): update module google.golang.org/grpc to v1.77.0

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-grpc-1.x
• Merge into: main
• Upgrade google.golang.org/grpc to v1.77.0

build(deps): update opentelemetry-go monorepo to v1.39.0

• Schedule: ["at any time"]
• Branch name: renovate/opentelemetry-go-monorepo
• Merge into: main
• Upgrade go.opentelemetry.io/otel to v1.39.0
• Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace to v1.39.0
• Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to v1.39.0
• Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.39.0
• Upgrade go.opentelemetry.io/otel/exporters/stdout/stdouttrace to v1.39.0
• Upgrade go.opentelemetry.io/otel/sdk to v1.39.0
• Upgrade go.opentelemetry.io/otel/trace to v1.39.0

build(deps): update opentelemetry-go-contrib monorepo to v0.64.0

• Schedule: ["at any time"]
• Branch name: renovate/opentelemetry-go-contrib-monorepo
• Merge into: main
• Upgrade go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.64.0
• Upgrade go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace to v0.64.0
• Upgrade go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.64.0

chore(deps): update actions/checkout action to v4.3.1

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: main
• Upgrade actions/checkout to 34e114876b0b11c390a56381ad16ebd13914f8d5

chore(deps): update actions/download-artifact action to v4.3.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-download-artifact-4.x
• Merge into: main
• Upgrade actions/download-artifact to d3f86a106a0bac45b974a628896c90dbdf5c8093

chore(deps): update actions/setup-go action to v5.6.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-5.x
• Merge into: main
• Upgrade actions/setup-go to 40f1582b2485089dde7abd97c1529aa768e1baff

chore(deps): update actions/upload-artifact action to v4.6.2

• Schedule: ["at any time"]
• Branch name: renovate/actions-upload-artifact-4.x
• Merge into: main
• Upgrade actions/upload-artifact to ea165f8d65b6e75b540449e92b4886f43607fa02

chore(deps): update docker.io/goreleaser/goreleaser-cross docker tag to v1.26.0

• Schedule: ["at any time"]
• Branch name: renovate/docker.io-goreleaser-goreleaser-cross-1.x
• Merge into: main
• Upgrade docker.io/goreleaser/goreleaser-cross to sha256:7f027d7a8d821e7bb924c568c4bc586c4fe6dbecf7d22d9f48228c915846c502

chore(deps): update module github.com/golangci/golangci-lint to v1.64.8

• Schedule: ["at any time"]
• Branch name: renovate/golangci-lint
• Merge into: main
• Upgrade github.com/golangci/golangci-lint to v1.64.8

chore(deps): update module github.com/google/go-jsonnet to v0.21.0

• Schedule: ["at any time"]
• Branch name: renovate/go-jsonnet
• Merge into: main
• Upgrade github.com/google/go-jsonnet to v0.21.0

chore(deps): update module github.com/jsonnet-bundler/jsonnet-bundler to v0.6.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-jsonnet-bundler-jsonnet-bundler-0.x
• Merge into: main
• Upgrade github.com/jsonnet-bundler/jsonnet-bundler to v0.6.0

chore(deps): update module mvdan.cc/gofumpt to v0.9.2

• Schedule: ["at any time"]
• Branch name: renovate/mvdan.cc-gofumpt-0.x
• Merge into: main
• Upgrade mvdan.cc/gofumpt to v0.9.2

build(deps): update module github.com/apache/arrow/go/v16 to v17

• Schedule: ["at any time"]
• Branch name: renovate/github.com-apache-arrow-go-v16-17.x
• Merge into: main
• Upgrade github.com/apache/arrow/go/v16 to v17.0.0

build(deps): update module github.com/containerd/containerd to v2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-containerd-containerd-2.x
• Merge into: main
• Upgrade github.com/containerd/containerd to v2.2.0

chore(deps): update actions/checkout action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to 8e8c483db84b4bee98b60c0593521ed34d9990e8

chore(deps): update actions/setup-go action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-6.x
• Merge into: main
• Upgrade actions/setup-go to 4dc6199c7b1a012772edbd06daecab0f50c9053c

chore(deps): update github artifact actions (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: main
• Upgrade actions/download-artifact to 37930b1c2abaa49bbe596cd826c3c89aef350131
• Upgrade actions/upload-artifact to b7c566a772e6b6bfb58ed0dc250532a479d7789f

chore(deps): update module github.com/golangci/golangci-lint to v2

• Schedule: ["at any time"]
• Branch name: renovate/major-golangci-lint
• Merge into: main
• Upgrade github.com/golangci/golangci-lint to v2.7.2

chore(deps): update softprops/action-gh-release action to v2

• Schedule: ["at any time"]
• Branch name: renovate/softprops-action-gh-release-2.x
• Merge into: main
• Upgrade softprops/action-gh-release to a06a81a03ee405af7f2048a818ed3f03bbf83c7b

chore(deps): jsonnet-bundler Lock file maintenance

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/jsonnet-bundler-lock-file-maintenance
• Merge into: main
• Regenerate lock files to use latest dependency versions

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up go package k8s.io/api

Files affected: go.mod

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.