chore(ci): configure renovate for k8s versions

.github/workflows/release-pr.yaml

@@ -90,11 +90,17 @@ jobs:
     strategy:
       matrix:
         kubernetes-version:
-          - "1.25.16"
+          # renovate: datasource=github-tags depName=kubernetes/kubernetes@only-patch versioning=semver
           - "1.26.15"
+          # renovate: datasource=github-tags depName=kubernetes/kubernetes@only-patch versioning=semver
           - "1.27.13"
+          # renovate: datasource=github-tags depName=kubernetes/kubernetes@only-patch versioning=semver
           - "1.28.9"
+          # renovate: datasource=github-tags depName=kubernetes/kubernetes@only-patch versioning=semver
           - "1.29.4"
+          # renovate: datasource=github-tags depName=kubernetes/kubernetes@only-patch versioning=semver
+          - "1.30.0"
+          # renovate: datasource=github-tags depName=kubernetes/kubernetes@only-patch versioning=semver
           - "1.30.0"
         chart-name:
           - kong

renovate.json

@@ -14,14 +14,37 @@
   "schedule": "before 5am every weekday",
   "customManagers": [
     {
-      "description": "Match dependencies in .tools_verisons.yaml that are properly annotated with `# renovate: datasource={} depName={}.`",
+      "description": "Match dependencies in .tools_verisons.yaml and .github/workflows/* that are properly annotated with `# renovate: datasource={} depName={}.`",
       "customType": "regex",
       "fileMatch": [
-        "\\.tools_versions\\.yaml$"
+        "\\.tools_versions\\.yaml$",
+        "\\.github/workflows/.*\\.yaml$"
       ],
       "matchStrings": [
         "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\n.+\"(?<currentValue>.*?)\""
       ]
     }
+  ],
+  "packageRules": [
+    {
+      "description": "Ignore minor updates if depName has `@only-patch` suffix.",
+      "matchUpdateTypes": [
+        "minor"
+      ],
+      "enabled": false,
+      "matchDepNames": [
+        "/.*@only-patch/"
+      ]
+    },
+    {
+      "description": "Group Kubernetes updates together.",
+      "matchUpdateTypes": [
+        "patch"
+      ],
+      "groupName": "kubernetes",
+      "matchDepNames": [
+        "kubernetes/kubernetes"
+      ]
+    }
   ]
 }