chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• infra/modules/database/resources/role_manager/Dockerfile (dockerfile)
• template-only-app/Dockerfile (dockerfile)
• .github/actions/configure-azure-credentials/action.yml (github-actions)
• .github/actions/setup-terraform/action.yml (github-actions)
• .github/workflows/build-and-publish.yml (github-actions)
• .github/workflows/check-ci-cd-auth.yml (github-actions)
• .github/workflows/ci-docs.yml (github-actions)
• .github/workflows/ci-infra.yml (github-actions)
• .github/workflows/database-migrations.yml (github-actions)
• .github/workflows/deploy.yml (github-actions)
• .github/workflows/template-only-cd.yml (github-actions)
• .github/workflows/template-only-ci-app.yml (github-actions)
• .github/workflows/vulnerability-scans.yml (github-actions)
• infra/modules/database/resources/role_manager/pyproject.toml (pep621)
• template-only-app/requirements.txt (pip_requirements)
• infra/modules/database/resources/role_manager/.python-version (pyenv)
• infra/accounts/container_registry.tf (terraform)
• infra/accounts/main.tf (terraform)
• infra/modules/azure/container-registry/data/main.tf (terraform)
• infra/modules/azure/network/private-endpoint/main.tf (terraform)
• infra/modules/azure/network/vnet/main.tf (terraform)
• infra/modules/azure/network/vnet/monitoring.tf (terraform)
• infra/modules/certificate-store/data/main.tf (terraform)
• infra/modules/certificate-store/resources/main.tf (terraform)
• infra/modules/database/data/main.tf (terraform)
• infra/modules/database/resources/main.tf (terraform)
• infra/modules/domain/data/main.tf (terraform)
• infra/modules/domain/resources/main.tf (terraform)
• infra/modules/network/data/main.tf (terraform)
• infra/modules/network/resources/main.tf (terraform)
• infra/modules/network/resources/private_link.tf (terraform)
• infra/modules/service/main.tf (terraform)
• infra/modules/terraform-backend-azure/main.tf (terraform)
• infra/networks/providers.tf (terraform)
• infra/{{app_name}}/app-config/build_repository.tf (terraform)
• infra/{{app_name}}/app-config/dev.tf (terraform)
• infra/{{app_name}}/app-config/env-config/main.tf (terraform)
• infra/{{app_name}}/app-config/main.tf (terraform)
• infra/{{app_name}}/app-config/prod.tf (terraform)
• infra/{{app_name}}/app-config/staging.tf (terraform)
• infra/{{app_name}}/database/main.tf (terraform)
• infra/{{app_name}}/service/database.tf (terraform)
• infra/{{app_name}}/service/domain.tf (terraform)
• infra/{{app_name}}/service/main.tf (terraform)
• infra/{{app_name}}/service/secrets.tf (terraform)
• .terraform-version (terraform-version)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 13 Pull Requests:

chore(deps): update ghcr.io/astral-sh/uv:python3.12-bookworm-slim docker digest to 1dc95ac

• Schedule: ["at any time"]
• Branch name: renovate/ghcr.io-astral-sh-uv-python3.12-bookworm-slim
• Merge into: main
• Upgrade ghcr.io/astral-sh/uv to sha256:1dc95ac11811c9a5ab2c19f37222b63e6a7f035fa98045203b134260b2143cd1

chore(deps): update gaurav-nelson/github-action-markdown-link-check action to v1.0.17

• Schedule: ["at any time"]
• Branch name: renovate/gaurav-nelson-github-action-markdown-link-check-1.x
• Merge into: main
• Upgrade gaurav-nelson/github-action-markdown-link-check to 1.0.17

chore(deps): update aquasecurity/tfsec-pr-commenter-action action to v1.3.1

• Schedule: ["at any time"]
• Branch name: renovate/aquasecurity-tfsec-pr-commenter-action-1.x
• Merge into: main
• Upgrade aquasecurity/tfsec-pr-commenter-action to v1.3.1

chore(deps): update bridgecrewio/checkov-action action to v12.3075.0

• Schedule: ["at any time"]
• Branch name: renovate/bridgecrewio-checkov-action-12.x
• Merge into: main
• Upgrade bridgecrewio/checkov-action to v12.3075.0

chore(deps): update dependency hashicorp/terraform to v1.14.0

• Schedule: ["at any time"]
• Branch name: renovate/terraform-monorepo
• Merge into: main
• Upgrade hashicorp/terraform to 1.14.0
• Upgrade hashicorp/terraform to ~> 1.14.0

chore(deps): update erzz/dockle-action action to v1.4.0

• Schedule: ["at any time"]
• Branch name: renovate/erzz-dockle-action-1.x
• Merge into: main
• Upgrade erzz/dockle-action to v1.4.0

chore(deps): update hadolint/hadolint-action action to v3.3.0

• Schedule: ["at any time"]
• Branch name: renovate/hadolint-hadolint-action-3.x
• Merge into: main
• Upgrade hadolint/hadolint-action to v3.3.0

chore(deps): update python docker tag to v3.14

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to 3.14
• Upgrade python to 3.14

chore(deps): update terraform azurerm to ~> 4.54.0

• Schedule: ["at any time"]
• Branch name: renovate/azurerm-4.x
• Merge into: main
• Upgrade azurerm to ~> 4.54.0

chore(deps): update actions/checkout action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to v6

chore(deps): update actions/setup-python action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-python-6.x
• Merge into: main
• Upgrade actions/setup-python to v6

chore(deps): update anchore/scan-action action to v7

• Schedule: ["at any time"]
• Branch name: renovate/anchore-scan-action-7.x
• Merge into: main
• Upgrade anchore/scan-action to v7

chore(deps): update hashicorp/setup-terraform action to v3

• Schedule: ["at any time"]
• Branch name: renovate/hashicorp-setup-terraform-3.x
• Merge into: main
• Upgrade hashicorp/setup-terraform to v3

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.