chore: Configure Renovate

[elastic-renovate-prod]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• docker-compose.yml (docker-compose)
• packaging/docker/Dockerfile (dockerfile)
• packaging/docker/Dockerfile.fips (dockerfile)
• packaging/docker/Dockerfile.wolfi (dockerfile)
• packaging/ironbank/Dockerfile (dockerfile)
• testing/docker/elastic-agent/Dockerfile (dockerfile)
• .github/workflows/add-to-docs-project.yml (github-actions)
• .github/workflows/add-to-project.yml (github-actions)
• .github/workflows/backport-active.yml (github-actions)
• .github/workflows/benchmarks.yml (github-actions)
• .github/workflows/bump-elastic-stack.yml (github-actions)
• .github/workflows/bump-golang.yml (github-actions)
• .github/workflows/catalog-info.yml (github-actions)
• .github/workflows/check-docker-compose.yml (github-actions)
• .github/workflows/ci-docs.yml (github-actions)
• .github/workflows/ci.yml (github-actions)
• .github/workflows/docs-build.yml (github-actions)
• .github/workflows/docs-cleanup.yml (github-actions)
• .github/workflows/functional-tests.yml (github-actions)
• .github/workflows/github-commands-comment.yml (github-actions)
• .github/workflows/mergify-labels-copier.yml (github-actions)
• .github/workflows/microbenchmark.yml (github-actions)
• .github/workflows/pre-commit.yml (github-actions)
• .github/workflows/prepare-release/action.yml (github-actions)
• .github/workflows/run-major-release.yml (github-actions)
• .github/workflows/run-minor-release.yml (github-actions)
• .github/workflows/run-patch-release.yml (github-actions)
• .github/workflows/setup-cluster-env/action.yml (github-actions)
• .github/workflows/smoke-test-ess-action/action.yml (github-actions)
• .github/workflows/smoke-tests-ess.yml (github-actions)
• .github/workflows/smoke-tests-os.yml (github-actions)
• .github/workflows/smoke-tests-schedule.yml (github-actions)
• .github/workflows/terraform-fmt.yml (github-actions)
• .github/workflows/test-reporter.yml (github-actions)
• .github/workflows/update-beats.yml (github-actions)
• .github/workflows/update-compose.yml (github-actions)
• .github/workflows/update-dependabot-pr.yml (github-actions)
• cmd/intake-receiver/go.mod (gomod)
• functionaltests/go.mod (gomod)
• go.mod (gomod)
• systemtest/go.mod (gomod)
• functionaltests/infra/terraform/main.tf (terraform)
• functionaltests/infra/terraform/tags.tf (terraform)
• functionaltests/infra/terraform/terraform.tf (terraform)
• testing/benchmark/main.tf (terraform)
• testing/cloud/main.tf (terraform)
• testing/infra/terraform/modules/benchmark_executor/instance.tf (terraform)
• testing/infra/terraform/modules/ec_deployment/terraform.tf (terraform)
• testing/infra/terraform/modules/rally_workers/main.tf (terraform)
• testing/infra/terraform/modules/rally_workers/providers.tf (terraform)
• testing/infra/terraform/modules/soaktest_workers/main.tf (terraform)
• testing/infra/terraform/modules/soaktest_workers/provider.tf (terraform)
• testing/rally-cloud/main.tf (terraform)
• testing/smoke/main.tf (terraform)
• testing/smoke/managed/main.tf (terraform)
• testing/smoke/supported-os/main.tf (terraform)
• .buildkite/package.yml (regex)
• packaging/docker/Dockerfile (regex)
• packaging/docker/Dockerfile.fips (regex)
• packaging/docker/Dockerfile.wolfi (regex)
• packaging/ironbank/Dockerfile (regex)
• testing/docker/elastic-agent/Dockerfile (regex)
• dev_docs/TESTING.md (regex)
• testing/cloud/README.md (regex)
• .buildkite/package.yml (regex)
• packaging/docker/Dockerfile (regex)
• packaging/docker/Dockerfile.fips (regex)
• packaging/docker/Dockerfile.wolfi (regex)
• packaging/ironbank/Dockerfile (regex)
• testing/docker/elastic-agent/Dockerfile (regex)
• dev_docs/TESTING.md (regex)
• testing/cloud/README.md (regex)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Chainguard Renovate configuration (https://ela.st/wolfi)
• Renovate configuration to manage containers in docker.elastic.co/ci-agent-images/*. This is included by default and doesn't need to be explicitly pulled in
• Chainguard Renovate configuration (https://ela.st/wolfi)
• Renovate configuration to manage containers in docker.elastic.co/ci-agent-images/*. This is included by default and doesn't need to be explicitly pulled in
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Pin Docker digests.
• Pin github-action digests.
• Enable Renovate configuration migration PRs when needed.
• Pin dependency versions for devDependencies.
• Shared Renovate configuration for an out-of-the-box set of defaults for Renovate at Elastic

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 35 Pull Requests:

chore(deps): pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/pin-dependencies
• Merge into: main
• Upgrade actions/cache to 5a3ec84eff668545956fd18022155c47e93e2684
• Upgrade actions/checkout to 11bd71901bbe5b1630ceea73d27597364c9af683
• Upgrade actions/setup-go to d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• Upgrade actions/setup-go to 0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• Upgrade docker.elastic.co/beats/metricbeat to sha256:cf880392f250c06f3ef6ad784b60faa1be16d6ab4e7c26f5eaf68ee96eb9c7a2
• Upgrade docker.elastic.co/elasticsearch/elasticsearch to sha256:1ce1bb17506c658cae785dc907707f60c25d66c1316fc2300747dfb5b1a82c9e
• Upgrade docker.elastic.co/kibana/kibana to sha256:b090975d3a9b3749154a5a63e71a53b530eda2673424b29e284ce2889b587362
• Upgrade elastic/oblt-actions to 8e520e6084fd20336dba88cd5b386775aa8d3ad3
• Upgrade golang to sha256:4c0a1814a7c6c65ece28b3bfea14ee3cf83b5e80b81418453f0e9d5255a5d7b8

chore(deps): update actions/setup-go digest to d35c59a

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-digest
• Merge into: main
• Upgrade actions/setup-go to d35c59abb061a4a6fb18e82ac0862c26744d6ab5

chore(deps): update cgr.dev/chainguard/static:latest docker digest to 4827893

• Schedule: ["at any time"]
• Branch name: renovate/cgr.dev-chainguard-static-latest
• Merge into: main
• Upgrade cgr.dev/chainguard/static to sha256:48278935856fba0e9fac80365ae9a5b33297f7e5682c2dcb86ecfe5eb6878972

chore(deps): update elastic/oblt-actions digest to 8e520e6

• Schedule: ["at any time"]
• Branch name: renovate/elastic-oblt-actions-digest
• Merge into: main
• Upgrade elastic/oblt-actions to 8e520e6084fd20336dba88cd5b386775aa8d3ad3

chore(deps): update tj-actions/changed-files digest to a284dc1

• Schedule: ["at any time"]
• Branch name: renovate/tj-actions-changed-files-digest
• Merge into: main
• Upgrade tj-actions/changed-files to a284dc1814e3fd07f2e34267fc8f81227ed29fb8

chore(deps): update wolfi (versioned)

• Schedule: ["at any time"]
• Branch name: renovate/wolfi-(versioned)
• Merge into: main
• Upgrade docker.elastic.co/wolfi/chainguard-base-fips to sha256:68e0781cd592beda39880428985d5fecca1cf2abb18365da73bf1f7ebd994974
• Upgrade docker.elastic.co/wolfi/go to sha256:984754f9dd0d498d5db690ee53c59945a0997624a2398dea9436ea19e39d85cb
• Upgrade docker.elastic.co/wolfi/go-msft-fips to sha256:65f32cfbd11a6ccffe260925ad9efe45f8ac33b3caeed063295159d499800de7

fix(deps): update github.com/elastic/apm-tools digest to ef612f5

• Schedule: ["at any time"]
• Branch name: renovate/github.com-elastic-apm-tools-digest
• Merge into: main
• Upgrade github.com/elastic/apm-tools to ef612f5d0eaf

fix(deps): update github.com/google/pprof digest to c008609

• Schedule: ["at any time"]
• Branch name: renovate/github.com-google-pprof-digest
• Merge into: main
• Upgrade github.com/google/pprof to c0086092b71a

chore(deps): update tj-actions/changed-files action to v45.0.9

• Schedule: ["at any time"]
• Branch name: renovate/tj-actions-changed-files-45.x
• Merge into: main
• Upgrade tj-actions/changed-files to a284dc1814e3fd07f2e34267fc8f81227ed29fb8

chore(deps): update actions/setup-go action to v5.5.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-5.x
• Merge into: main
• Upgrade actions/setup-go to d35c59abb061a4a6fb18e82ac0862c26744d6ab5

chore(deps): update elastic/oblt-actions action to v1.29.0

• Schedule: ["at any time"]
• Branch name: renovate/elastic-oblt-actions-1.x
• Merge into: main
• Upgrade elastic/oblt-actions to 8e520e6084fd20336dba88cd5b386775aa8d3ad3

chore(deps): update slackapi/slack-github-action action to v2.1.0

• Schedule: ["at any time"]
• Branch name: renovate/slackapi-slack-github-action-2.x
• Merge into: main
• Upgrade slackapi/slack-github-action to b0fa283ad8fea605de13dc3f449259339835fc52

chore(deps): update terraform ec to v0.12.2

• Schedule: ["at any time"]
• Branch name: renovate/ec-0.x
• Merge into: main
• Upgrade ec to 0.12.2

chore(deps): update terraform terraform-aws-modules/ec2-instance/aws to v3.6.0

• Schedule: ["at any time"]
• Branch name: renovate/terraform-aws-modules-ec2-instance-aws-3.x
• Merge into: main
• Upgrade terraform-aws-modules/ec2-instance/aws to 3.6.0

chore(deps): update terraform terraform-aws-modules/vpc/aws to v3.19.0

• Schedule: ["at any time"]
• Branch name: renovate/terraform-aws-modules-vpc-aws-3.x
• Merge into: main
• Upgrade terraform-aws-modules/vpc/aws to 3.19.0

fix(deps): update module github.com/elastic/beats/v7 to v7.17.28

• Schedule: ["at any time"]
• Branch name: renovate/github.com-elastic-beats-v7-7.x
• Merge into: main
• Upgrade github.com/elastic/beats/v7 to 1f2938c6bf213e5f24f64538600310d07135d7b8

fix(deps): update module github.com/elastic/cloud-sdk-go to v1.24.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-elastic-cloud-sdk-go-1.x
• Merge into: main
• Upgrade github.com/elastic/cloud-sdk-go to v1.24.0

fix(deps): update module github.com/elastic/go-elasticsearch/v8 to v8.18.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-elastic-go-elasticsearch-v8-8.x
• Merge into: main
• Upgrade github.com/elastic/go-elasticsearch/v8 to v8.18.0

fix(deps): update module github.com/hashicorp/terraform-exec to v0.23.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-hashicorp-terraform-exec-0.x
• Merge into: main
• Upgrade github.com/hashicorp/terraform-exec to v0.23.0

fix(deps): update module github.com/stretchr/testify to v1.10.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-stretchr-testify-1.x
• Merge into: main
• Upgrade github.com/stretchr/testify to v1.10.0

fix(deps): update module go.elastic.co/apm/module/apmelasticsearch/v2 to v2.7.0

• Schedule: ["at any time"]
• Branch name: renovate/go.elastic.co-apm-module-apmelasticsearch-v2-2.x
• Merge into: main
• Upgrade go.elastic.co/apm/module/apmelasticsearch/v2 to v2.7.0

fix(deps): update module go.elastic.co/apm/module/apmgorilla/v2 to v2.7.0

• Schedule: ["at any time"]
• Branch name: renovate/go.elastic.co-apm-module-apmgorilla-v2-2.x
• Merge into: main
• Upgrade go.elastic.co/apm/module/apmgorilla/v2 to v2.7.0

fix(deps): update module go.elastic.co/apm/module/apmgrpc/v2 to v2.7.0

• Schedule: ["at any time"]
• Branch name: renovate/go.elastic.co-apm-module-apmgrpc-v2-2.x
• Merge into: main
• Upgrade go.elastic.co/apm/module/apmgrpc/v2 to v2.7.0

fix(deps): update module go.elastic.co/apm/module/apmhttp/v2 to v2.7.0

• Schedule: ["at any time"]
• Branch name: renovate/go.elastic.co-apm-module-apmhttp-v2-2.x
• Merge into: main
• Upgrade go.elastic.co/apm/module/apmhttp/v2 to v2.7.0

fix(deps): update module go.elastic.co/apm/module/apmotel/v2 to v2.7.0

• Schedule: ["at any time"]
• Branch name: renovate/go.elastic.co-apm-module-apmotel-v2-2.x
• Merge into: main
• Upgrade go.elastic.co/apm/module/apmotel/v2 to v2.7.0

fix(deps): update module go.elastic.co/apm/v2 to v2.7.0

• Schedule: ["at any time"]
• Branch name: renovate/go.elastic.co-apm-v2-2.x
• Merge into: main
• Upgrade go.elastic.co/apm/v2 to v2.7.0
• Upgrade go.elastic.co/apm/v2 to b9512a97298b05a883920daffa2bcb11627bfcd7

fix(deps): update opentelemetry-go monorepo to v1.36.0

• Schedule: ["at any time"]
• Branch name: renovate/opentelemetry-go-monorepo
• Merge into: main
• Upgrade go.opentelemetry.io/otel to v1.36.0
• Upgrade go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc to v1.36.0
• Upgrade go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.36.0
• Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace to v1.36.0
• Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to v1.36.0
• Upgrade go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.36.0
• Upgrade go.opentelemetry.io/otel/metric to v1.36.0
• Upgrade go.opentelemetry.io/otel/sdk to v1.36.0
• Upgrade go.opentelemetry.io/otel/sdk/metric to v1.36.0
• Upgrade go.opentelemetry.io/otel/trace to v1.36.0

chore(deps): update terraform aws to v5

• Schedule: ["at any time"]
• Branch name: renovate/aws-5.x
• Merge into: main
• Upgrade aws to ~> 5.0

chore(deps): update terraform terraform-aws-modules/ec2-instance/aws to v5

• Schedule: ["at any time"]
• Branch name: renovate/terraform-aws-modules-ec2-instance-aws-5.x
• Merge into: main
• Upgrade terraform-aws-modules/ec2-instance/aws to 5.8.0

chore(deps): update terraform terraform-aws-modules/vpc/aws to v5

• Schedule: ["at any time"]
• Branch name: renovate/terraform-aws-modules-vpc-aws-5.x
• Merge into: main
• Upgrade terraform-aws-modules/vpc/aws to 5.21.0

chore(deps): update tj-actions/changed-files action to v46

• Schedule: ["at any time"]
• Branch name: renovate/tj-actions-changed-files-46.x
• Merge into: main
• Upgrade tj-actions/changed-files to ed68ef82c095e0d48ec87eccea555d944a631a4c

fix(deps): update module github.com/dnaeon/go-vcr to v4

• Schedule: ["at any time"]
• Branch name: renovate/github.com-dnaeon-go-vcr-4.x
• Merge into: main
• Upgrade github.com/dnaeon/go-vcr to v4.0.2

fix(deps): update module github.com/elastic/apm-perf to v1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-elastic-apm-perf-1.x
• Merge into: main
• Upgrade github.com/elastic/apm-perf to 6a3bac5eb49d376929cc0ba8b4016c4b6d403f47

fix(deps): update module github.com/elastic/go-elasticsearch/v8 to v9

• Schedule: ["at any time"]
• Branch name: renovate/github.com-elastic-go-elasticsearch-v8-9.x
• Merge into: main
• Upgrade github.com/elastic/go-elasticsearch/v8 to v9.0.0

fix(deps): update module gopkg.in/yaml.v2 to v3

• Schedule: ["at any time"]
• Branch name: renovate/gopkg.in-yaml.v2-3.x
• Merge into: main
• Upgrade gopkg.in/yaml.v2 to v3.0.1

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up docker package registry1.dsop.io/redhat/ubi/ubi9
• Could not determine new digest for update (github-tags package octokit/graphql-action)
• Could not determine new digest for update (github-tags package rlespinasse/github-slug-action)

Files affected: packaging/ironbank/Dockerfile, .github/workflows/add-to-docs-project.yml, .github/workflows/benchmarks.yml

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Renovate Bot.

[github-actions]

🤖 GitHub comments

Expand to view the GitHub comments

Just comment with:

• run docs-build : Re-trigger the docs validation. (use unformatted text in the comment!)

[mergify]

This pull request does not have a backport label. Could you fix it @elastic-renovate-prod[bot]? 🙏
To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

• backport-7.17 is the label to automatically backport to the 7.17 branch.
• backport-8./d is the label to automatically backport to the 8./d branch. /d is the digit.
• backport-9./d is the label to automatically backport to the 9./d branch. /d is the digit.
• backport-active-all is the label that automatically backports to all active branches.
• backport-active-8 is the label that automatically backports to all active minor branches for the 8 major.
• backport-active-9 is the label that automatically backports to all active minor branches for the 9 major.