Configure Renovate (#237)

* Configure renovate
* pin remaining github actions
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/azure-snp-reporter.yml

@@ -70,7 +70,7 @@ jobs:
           go-version: 1.19.2
 
       - name: Download report JWT
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 # tag=v3.0.0
         with:
           name: "maa-report.jwt"
           path: "."

.github/workflows/docs-vale.yml

@@ -19,7 +19,7 @@ jobs:
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: Vale
-        uses: errata-ai/vale-action@753427452ff1d6cf7a7b76a552aa0cbee3971551
+        uses: errata-ai/vale-action@c4213d4de3d5f718b8497bd86161531c78992084 # tag=v2.0.1
         with:
           files: docs/docs
         env:

renovate.json

@@ -0,0 +1,24 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:base",
+    ":preserveSemverRanges",
+    "helpers:pinGitHubActionDigests",
+    ":separateMajorReleases"
+  ],
+  "addLabels": ["dependencies"],
+  "postUpdateOptions": ["gomodTidy", "gomodUpdateImportPaths"],
+  "ignorePaths": [
+    "cli/internal/helm/charts/cilium/**"
+  ],
+  "packageRules": [
+    {
+      "matchPackagePatterns": ["^k8s.io", "^sigs.k8s.io"],
+      "groupName": "k8s dependencies"
+    },
+    {
+      "matchDatasources": ["golang-version"],
+      "allowedVersions": "1.18"
+    }
+  ]
+}