chore: stop bumping go directive, fast-track toolchain (#547)

Aligns Go version handling with the two distinct go.mod directives:

- The `go` directive is the minimum language version. Renovate leaves `depType: golang` disabled by default, so the rule that bumped it is removed and it no longer churns.
- The `toolchain` directive pins the exact build version. Renovate proposes `toolchain` updates by default, and a new rule fast-tracks them (`at any time`, no min-age).

Effect per consumer repo:

- With a `toolchain` directive: bumped to the latest Go patch immediately.
- With only a `go` directive: left untouched. Regular module updates still flow under the "Go dependencies" group, and `gomodTidy` raises the `go` directive only when an updated dependency requires it, so builds never break.

Mirrors the same change in gitea/gitea: https://github.com/go-gitea/gitea/pull/37846

---
This PR was written with the help of Claude Opus 4.7.

Reviewed-on: https://gitea.com/gitea/renovate-config/pulls/547
Reviewed-by: techknowlogick <9+techknowlogick@noreply.gitea.com>
Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com>
Co-authored-by: silverwind <me@silverwind.io>
Co-committed-by: silverwind <me@silverwind.io>

.gitea/workflows/renovate.yml

@@ -11,13 +11,15 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:latest
+    container: ghcr.io/renovatebot/renovate:43.191.2
     steps:
       - uses: actions/checkout@v6
       - run: renovate
         env:
-          RENOVATE_CONFIG_FILE: "/workspace/nerthus/renovate-config/config.js"
+          RENOVATE_CONFIG_FILE: "/workspace/gitea/renovate-config/config.js"
           LOG_LEVEL: "debug"
-          RENOVATE_CONFIG_MIGRATION: "true"
+          RENOVATE_CONFIG_MIGRATION: "true" # ensure all repositories receive config migration PRs
           RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
           GITHUB_COM_TOKEN: ${{ secrets.GH_TOKEN }}
+          HUB_DOCKER_COM_USER: ${{ secrets.HUB_DOCKER_COM_USER }}
+          HUB_DOCKER_COM_TOKEN: ${{ secrets.HUB_DOCKER_COM_TOKEN }}

LICENSE

@@ -1,7 +1,6 @@
 MIT License
 
 Copyright (c) 2023 gitea
-Copyright (c) 2024 DaanSelen
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
 

README.md

@@ -23,8 +23,8 @@ Usage:
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "local>nerthus/renovate-config",
-+   "local>nerthus/renovate-config:go-deps"
+    "local>gitea/renovate-config",
++   "local>gitea/renovate-config:go-deps"
   ]
 }
 ```
@@ -44,8 +44,8 @@ Usage:
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "local>nerthus/renovate-config",
-+   "local>nerthus/renovate-config:npm-deps"
+    "local>gitea/renovate-config",
++   "local>gitea/renovate-config:npm-deps"
   ]
 }
 ```
@@ -63,8 +63,8 @@ Usage:
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "local>nerthus/renovate-config",
-+   "local>nerthus/renovate-config:workflow-deps"
+    "local>gitea/renovate-config",
++   "local>gitea/renovate-config:workflow-deps"
   ]
 }
 ```
@@ -82,8 +82,8 @@ Usage:
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "local>nerthus/renovate-config",
-+   "local>nerthus/renovate-config:security"
+    "local>gitea/renovate-config",
++   "local>gitea/renovate-config:security"
   ]
 }
 ```

config.js

@@ -1,16 +1,24 @@
 module.exports = {
-    "prConcurrentLimit": 100,
-    "branchConcurrentLimit": 100,
-    "prHourlyLimit": 0,
-    "prCommitsPerRunLimit": 0,
-    "endpoint": "https://gitea.nerthus.nl/api/v1",
-    "gitAuthor": "Renovate Bot <renovate-bot@nerthus.nl>",
+    "endpoint": "https://gitea.com/api/v1",
+    "gitAuthor": "Renovate Bot <renovate-bot@gitea.com>",
     "platform": "gitea",
     "onboardingConfigFileName": "renovate.json5",
     "autodiscover": true,
-    "autodiscoverFilter": ["daanselen/\*"],
+    "autodiscoverFilter": ["gitea/*"],
     "optimizeForDisabled": true,
     "forkProcessing": "disabled",
     "dryRun": null,
-    "binarySource": "install"
+    "binarySource": "install",
+    "hostRules": [
+        {
+            "matchHost": "docker.io",
+            "username": process.env.HUB_DOCKER_COM_USER,
+            "password": process.env.HUB_DOCKER_COM_TOKEN
+        }
+    ],
+    "allowedPostUpgradeCommands": [
+        // [gitea/helm-chart] Update README.md on dependency changes in values.yaml
+        "install-tool node",
+        "make readme"
+    ]
 };

default.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:recommended","local>nerthus/renovate-config:workflow-deps"],
+  "extends": ["config:recommended","local>gitea/renovate-config:workflow-deps"],
   "configMigration": true,
   "minimumReleaseAge": "5 days",
   "semanticCommits": "enabled",

renovate.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["nerthus/renovate-config"],
+  "extends": ["gitea/renovate-config"],
   "dependencyDashboard": true,
   "enabledManagers": [
     "github-actions"
@@ -17,7 +17,7 @@
       "description": "Automerge renovate updates",
       "matchPackageNames": ["renovatebot/renovate"],
       "matchUpdateTypes": ["minor", "patch", "digest"],
-      "automerge": false
+      "automerge": true
     }
   ]
 }