ci: update renovate.json; disable setup-go cache (#49)

Signed-off-by: Tyler Gillson <[email protected]>

Author: TylerGillson

.github/workflows/bulwark-golicences.yaml

@@ -11,20 +11,20 @@ concurrency:
 jobs:
   golicense-pr-scan:
     runs-on: [self-hosted, Linux, X64, validator]
+    container:
+      image: gcr.io/spectro-images-public/golang:1.22-alpine
     steps:
-      - name: install-git
-        run: sudo apt-get install -y git
-
       - name: checkout
         uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
       - name: Set up Go
         uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5
         with:
+          cache: false
           go-version-file: go.mod
 
       - name: install-golicenses
-        run: go install github.com/google/go-licenses@v1.0.0
+        run: go install github.com/google/go-licenses@latest
 
       - name: golicense-scan
         run: |

.github/workflows/bulwark-gosec.yaml

@@ -22,7 +22,8 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5
         with:
-          go-version: '1.21'
+          cache: false
+          go-version-file: go.mod
 
       - name: run-gosec-scan
         shell: sh

.github/workflows/test.yaml

@@ -21,6 +21,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5
         with:
+          cache: false
           go-version-file: go.mod
 
       - name: Test

renovate.json

@@ -1,49 +1,69 @@
 {
-    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-    "extends": [
-      "config:base",
-      "helpers:pinGitHubActionDigests",
-      ":gitSignOff"
-    ],
-    "addLabels": ["dependencies"],
-    "postUpdateOptions": [
-      "gomodTidy",
-      "gomodMassage"
-    ],
-    "packageRules": [
-      {
-        "matchUpdateTypes": ["minor", "patch"],
-        "matchCurrentVersion": "!/^0/",
-        "automerge": true
-      },
-      {
-        "matchManagers": ["gomod"],
-        "addLabels": ["go"],
-        "automerge": true
-      },
-      {
-        "matchManagers": ["github-actions"],
-        "addLabels": ["github_actions"],
-        "automerge": true
-      },
-      {
-        "matchManagers": ["dockerfile"],
-        "addLabels": ["docker"],
-        "automerge": true
-      }
-    ],
-    "regexManagers": [
-      {
-        "fileMatch": [
-          "(^|\\/)Makefile$",
-          "(^|\\/)Dockerfile",
-          "(^|\\/).*\\.ya?ml$",
-          "(^|\\/).*\\.toml$",
-          "(^|\\/).*\\.sh$"
-        ],
-        "matchStrings": [
-          "# renovate: datasource=(?<datasource>.+?) depName=(?<depName>.+?)\\s.*?_VERSION ?(\\??=|\\: ?) ?\\\"?(?<currentValue>.+?)?\\\"?\\s"
-        ]
-      }
-    ]
-  }
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:base",
+    "helpers:pinGitHubActionDigests",
+    ":gitSignOff"
+  ],
+  "addLabels": ["dependencies"],
+  "postUpdateOptions": [
+    "gomodTidy",
+    "gomodMassage"
+  ],
+  "packageRules": [
+    {
+      "matchUpdateTypes": ["pin", "pinDigest", "digest"],
+      "addLabels": ["pin"],
+      "automerge": true
+    },
+    {
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchCurrentVersion": "!/^0/",
+      "automerge": true
+    },
+    {
+      "matchManagers": ["gomod"],
+      "addLabels": ["go"],
+      "automerge": true
+    },
+    {
+      "matchManagers": ["github-actions"],
+      "addLabels": ["github_actions"],
+      "automerge": true
+    },
+    {
+      "matchManagers": ["crossplane"],
+      "addLabels": ["crossplane"],
+      "automerge": true
+    },
+    {
+      "matchManagers": ["dockerfile"],
+      "addLabels": ["docker"],
+      "automerge": true
+    },
+    {
+      "matchManagers": ["kustomize"],
+      "addLabels": ["kustomize"],
+      "automerge": true
+    },
+    {
+      "matchManagers": ["helm-values"],
+      "addLabels": ["helm_values"],
+      "automerge": true
+    }
+  ],
+  "regexManagers": [
+    {
+      "fileMatch": [
+        "(^|\\/)Makefile$",
+        "(^|\\/)Dockerfile",
+        "(^|\\/).*\\.ya?ml$",
+        "(^|\\/).*\\.toml$",
+        "(^|\\/).*\\.sh$"
+      ],
+      "matchStrings": [
+        "# renovate: datasource=(?<datasource>.+?) depName=(?<depName>.+?)\\s.*?_VERSION ?(\\??=|\\: ?) ?\\\"?(?<currentValue>.+?)?\\\"?\\s"
+      ]
+    }
+  ]
+}