chore: Configure Renovate

[elastic-renovate-prod[bot]]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/addToProject.yml (github-actions)
• .github/workflows/labeler.yml (github-actions)
• .github/workflows/periodic.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• .github/workflows/test-docs.yml (github-actions)
• .github/workflows/test.yml (github-actions)
• .github/workflows/update-specs.yml (github-actions)
• pyproject.toml (pep621)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Chainguard Renovate configuration (https://ela.st/wolfi)
• Chainguard Renovate configuration (https://ela.st/wolfi)
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Pin Docker digests.
• Pin github-action digests.
• Pin dependency versions for devDependencies.
• Preset with best practices from the Renovate maintainers. Recommended for advanced users, who want to follow our best practices.
• Shared Renovate configuration for an out-of-the-box set of defaults for Renovate at Elastic

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 3 Pull Requests:

chore(deps): pin dependencies

- Schedule: ["at any time"] - Branch name: `renovate/pin-dependencies` - Merge into: `main` - Upgrade [actions-ecosystem/action-add-labels](https://togithub.com/actions-ecosystem/action-add-labels) to `18f1af5e3544586314bbe15c0273249c770b2daf` - Upgrade [actions/checkout](https://togithub.com/actions/checkout) to `692973e3d937129bcbf40652eb9f2f61becf3332` - Upgrade [actions/download-artifact](https://togithub.com/actions/download-artifact) to `fa0a91b85d4f404e444e00e005971372dc801d16` - Upgrade [actions/setup-python](https://togithub.com/actions/setup-python) to `39cd14951b08e74b54015e9e001cdefcf80e669f` - Upgrade [actions/upload-artifact](https://togithub.com/actions/upload-artifact) to `834a144ee995460fba8ed112a2fc961b36a5ec5a` - Upgrade elastic/apm-pipeline-library to `0abb7c92aa7ed263e7d896db50a1ad3389c3fca1` - Upgrade [elastic/assign-one-project-github-action](https://togithub.com/elastic/assign-one-project-github-action) to `2573c8fb01aadfde8f5b653eea21dd24569ca831` - Upgrade [elastic/oblt-actions](https://togithub.com/elastic/oblt-actions) to `095f952145365daec1798d9914dd97f1a8930517`

chore(deps): update pypa/gh-action-pypi-publish digest to fb9fc6a

- Schedule: ["at any time"] - Branch name: `renovate/pypa-gh-action-pypi-publish-digest` - Merge into: `main` - Upgrade pypa/gh-action-pypi-publish to `fb9fc6a4e67ca27a7a76b17bbf90be83c2d3c716`

chore(deps): update actions/attest-build-provenance action to v1.4.1

- Schedule: ["at any time"] - Branch name: `renovate/actions-attest-build-provenance-1.x` - Merge into: `main` - Upgrade [actions/attest-build-provenance](https://togithub.com/actions/attest-build-provenance) to `310b0a4a3b0b78ef57ecda988ee04b132db73ef8`

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section. If you need any further assistance then you can also request help here.

---

This PR has been generated by Renovate Bot.

[v1v]

We use dependabot in this repository

[elastic-renovate-prod[bot]]

Renovate is disabled

Renovate is disabled because there is no Renovate configuration file. To enable Renovate, you can either (a) change this PR's title to get a new onboarding PR, and merge the new onboarding PR, or (b) create a Renovate config file, and commit that file to your base branch.