HYPERFLEET-1095 - chore: add renovate.json to fix broken MintMaker PRs

[ciaranRoche]

Summary

• Adds renovate.json to disable broken Go module digest updates (known Renovate bug that writes invalid pseudo-versions to go.mod)
• Disables indirect Go dependency updates (they float naturally via go mod tidy)
• Groups Go minor/patch updates into a single PR instead of one per dependency
• Groups Docker image updates into a single PR
• Schedules all updates to run weekly on Mondays

Context

MintMaker (Konflux Renovate) is running with defaults, producing 20 open PRs (3 broken digest updates, 17 individual version bumps). This config reduces noise to ~2-3 grouped PRs per week.

See HYPERFLEET-1095 for full details.

Test plan

• Verify existing broken digest PRs (Update github.com/lufia/plan9stats digest to c963978 #133, Update google.golang.org/genproto/googleapis/api digest to 3700d41 #134, Update google.golang.org/genproto/googleapis/rpc digest to 3700d41 #136) can be closed
• Verify MintMaker picks up the new config on next run
• Confirm grouped PRs appear on the next Monday cycle

🤖 Generated with Claude Code

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: ASSERTIVE

Plan: Enterprise

Run ID: 699a94a7-fbc7-4b58-9264-43a985c11a6d

📥 Commits

Reviewing files that changed from the base of the PR and between ef789be and 259be7b.

📒 Files selected for processing (1)

• renovate.json

---

📝 Walkthrough

Summary by CodeRabbit

• Chores
  • Configured automated dependency update management with weekly scheduling, custom grouping for update types, and targeted policies for dependency management.

Walkthrough

This pull request introduces a new renovate.json configuration file for the repository. The file defines the Renovate JSON schema and establishes a dependency update policy: updates are scheduled weekly on Mondays. The configuration includes package-specific rules that disable digest and indirect dependency updates for Go modules, while enabling semantic grouping for gomod minor and patch updates. Dockerfile-related updates are grouped separately under a "docker image updates" policy.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: adding renovate.json to fix MintMaker PRs, matching the changeset.
Description check	✅ Passed	The description is well-detailed and directly related to the changeset, explaining the config changes, context, and test plan.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch HYPERFLEET-1095

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[rafabene]

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: rafabene

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [rafabene]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment