chore: Configure Renovate

[NumaryBot]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• base.Dockerfile (dockerfile)
• .github/workflows/cron.yml (github-actions)
• .github/workflows/labeler.yml (github-actions)
• .github/workflows/releases.yml (github-actions)
• events/go.mod (gomod)
• go.mod (gomod)
• events/package.json (npm)

What to Expect

With your current configuration, Renovate will create 2 Pull Requests:

chore(deps): update security updates [security]

• Branch name: renovate/security
• Merge into: main
• Upgrade golang.org/x/mod to v0.40.0
• Upgrade yaml to 2.8.3

chore(deps): update github actions updates (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-github-actions
• Merge into: main
• Upgrade actions/checkout to v7
• Upgrade actions/labeler to v7
• Upgrade amannn/action-semantic-pull-request to v6
• Upgrade docker/build-push-action to v7
• Upgrade docker/login-action to v4
• Upgrade docker/setup-buildx-action to v4
• Upgrade docker/setup-qemu-action to v4

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Renovate Bot.

[NumaryBot]

✅ Approve — automated review

No actionable defects were identified in the Renovate configuration or Speakeasy lockfile change. The changes do not require updates to the existing repository documentation.

No findings.

[NumaryBot]

Findings

[NumaryBot]

🟡 [minor] Unrelated Speakeasy lock change in Renovate config PR

The diff adds the main tag to stacks-source and bumps speakeasyVersion 1.797.0 -> 1.798.0, which is unrelated to the PR's stated purpose (Renovate onboarding config). Impact: unrelated changes in a bot PR complicate review and revert. Suggestion: land it in a separate automated regeneration PR or confirm it is a side effect of the same bot run.

[NumaryBot]

🔵 [suggestion] External preset cannot be verified at pinned SHA

extends references github>formancehq/shared-config//renovate/presets/golang, which lives outside this repository and cannot be validated at head 9160502. Impact: if the preset path is wrong, Renovate will fail onboarding or use defaults silently. Suggestion: confirm the preset path resolves in the shared-config repo at merge time.