[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• compose.bench.yaml (docker-compose)
• compose.yaml (docker-compose)
• docker/pg_tle.Dockerfile (dockerfile)
• .github/workflows/bench.yml (github-actions)
• .github/workflows/ci.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• go.mod (gomod)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs

---

You have configured Renovate to use branch main as base branch.

What to Expect

With your current configuration, Renovate will create 10 Pull Requests:

Update module google.golang.org/grpc to v1.83.2 [SECURITY]

• Branch name: renovate/go-google.golang.org-grpc-vulnerability
• Merge into: main
• Upgrade google.golang.org/grpc to v1.83.2

Update github.com/openfga/api/proto digest to c0650ce

• Schedule: ["at any time"]
• Branch name: renovate/github.com-openfga-api-proto-digest
• Merge into: main
• Upgrade github.com/openfga/api/proto to c0650ce2169b

Update google.golang.org/genproto digest to ce908d2

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-genproto-digest
• Merge into: main
• Upgrade google.golang.org/genproto to ce908d29299b

Update postgres:18-alpine Docker digest to 77f5851

• Schedule: ["at any time"]
• Branch name: renovate/postgres-18-alpine
• Merge into: main
• Upgrade postgres to sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873

Update actions/upload-artifact action to v7.0.2

• Schedule: ["at any time"]
• Branch name: renovate/actions-upload-artifact-7.x
• Merge into: main
• Upgrade actions/upload-artifact to cf430e030ddbb5b0abf93d22962f4752f3646cd9

Update golang Docker tag to v1.27

• Schedule: ["at any time"]
• Branch name: renovate/golang-1.x
• Merge into: main
• Upgrade golang to 1.27-alpine

Update module github.com/jackc/pgx/v5 to v5.11.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-jackc-pgx-v5-5.x
• Merge into: main
• Upgrade github.com/jackc/pgx/v5 to v5.11.0

Update module github.com/openfga/openfga to v1.22.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-openfga-openfga-1.x
• Merge into: main
• Upgrade github.com/openfga/openfga to v1.22.0

Update openfga/openfga Docker tag to v1.22.0

• Schedule: ["at any time"]
• Branch name: renovate/openfga-openfga-1.x
• Merge into: main
• Upgrade openfga/openfga to sha256:9cf9a20af32a40434cd3a788c429879439ee9ea9abf65c9c200ee17cd43f769e

Update step-security/harden-runner action to v2.22.2

• Schedule: ["at any time"]
• Branch name: renovate/step-security-harden-runner-2.x
• Merge into: main
• Upgrade step-security/harden-runner to dc2769abcc0fcfbadfc1df54081c1608579ef6b2

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details. Security update Pull Request is not subject to this limit and will be created straight away.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Could not determine new digest for update (go package github.com/openfga/language/pkg/go)

Files affected: go.mod

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.