Add initial Renovate configuration

.github/renovate.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "github>rancher/renovate-config#release"
+  ],
+  "baseBranchPatterns": [
+    "main"
+  ],
+  "prHourlyLimit": 2,
+  "baseBranches": [
+    "main"
+  ]
+}

.github/renovate.json5

@@ -0,0 +1,51 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    ":ignoreModulesAndTests",
+    "group:monorepos",
+    "group:recommended",
+    "mergeConfidence:age-confidence-badges",
+    "replacements:all",
+    "workarounds:all",
+    "helpers:githubDigestChangelogs",
+    "helpers:goXPackagesChangelogLink",
+    "helpers:goXPackagesNameLink"
+  ],
+  "baseBranchPatterns": [
+    "main"
+  ],
+  "enabledManagers": [
+    "jsonata"
+  ],
+  "customManagers": [
+    /*
+    {
+      "customType": "regex",
+      "managerFilePatterns": ["/\\.ya?ml$/"],
+      "matchStrings": [
+        "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)?( extractVersion=(?<extractVersion>.*?))?\\s+.+_(version|VERSION).*:(\\s|\"|)(?<currentValue>.*)(\"|)",
+        "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?) digestVersion=(?<currentValue>.*)\\s+.+_(sha256|arm64|amd64|arm|s390x).*:(\\s|\"|)(?<currentDigest>.*)(\"|)"
+      ]
+    },
+    */
+    {
+      "customType": "jsonata",
+      "fileFormat": "yaml",
+      "managerFilePatterns": ["pkg/rancher-desktop/assets/dependencies.yaml"],
+      "matchStrings": ["                                                                           \
+        $ . $each(function($v, $n) { $merge([{ 'name': $n }, [$type($v) = 'object'] ? $v]) })      \
+        [datasource='github-release-attachments']                                                  \
+        .(                                                                                         \
+            $dep := $;                                                                             \
+            ($keys()[$match($, /^digest_/)])                                                       \
+            .({                                                                                    \
+                'datasource': $dep.datasource,                                                     \
+                'depName': $dep.repo,                                                              \
+                'currentValue': $dep.version,                                                      \
+                'currentDigest': $lookup($dep, $)                                                  \
+            })                                                                                     \
+        )                                                                                          \
+      "]
+    }
+  ]
+}

.github/workflows/renovate-vault.yml

@@ -0,0 +1,63 @@
+name: Renovate
+on:
+  workflow_dispatch:
+    inputs:
+      logLevel:
+        description: "Override default log level"
+        required: false
+        default: info
+        type: choice
+        options:
+          - info
+          - debug
+      overrideSchedule:
+        description: "Override all schedules"
+        required: false
+        default: "false"
+        type: choice
+        options:
+          - "false"
+          - "true"
+      configMigration:
+        description: "Toggle PRs for config migration"
+        required: false
+        default: "true"
+        type: choice
+        options:
+          - "false"
+          - "true"
+      renovateConfig:
+        description: "Define a custom renovate config file"
+        required: false
+        default: ".github/renovate.json"
+        type: string
+      minimumReleaseAge:
+        description: "Override minimumReleaseAge for a one-time run (e.g., '0 days' to disable delay)"
+        required: false
+        default: "null"
+        type: string
+      extendsPreset:
+        description: "Override renovate extends preset (default: 'github>rancher/renovate-config#release')."
+        required: false
+        default: "github>rancher/renovate-config#release"
+        type: string
+
+  schedule:
+    - cron: '30 4,6 * * 1-5'
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  call-workflow:
+    uses: rancher/renovate-config/.github/workflows/renovate-vault.yml@release
+    with:
+      configMigration: ${{ inputs.configMigration || 'true' }}
+      logLevel: ${{ inputs.logLevel || 'info' }}
+      overrideSchedule: ${{ github.event.inputs.overrideSchedule == 'true' && '{''schedule'':null}' || '' }}
+      renovateConfig: ${{ inputs.renovateConfig || '.github/renovate.json' }}
+      minimumReleaseAge: ${{ inputs.minimumReleaseAge || 'null' }}
+      extendsPreset: ${{ inputs.extendsPreset || 'github>rancher/renovate-config#release' }}
+    secrets:
+      override-token: "${{ secrets.RENOVATE_FORK_GH_TOKEN || '' }}"

pkg/rancher-desktop/assets/dependencies.yaml

@@ -1,12 +1,26 @@
-lima: 1.2.1.rd2
+lima:
+  datasource: github-release-attachments
+  repo: rancher-sandbox/rancher-desktop-lima
+  version: v1.2.0.rd1
+  digest_amd64: aaa
+  digest_arm64: aaa
 qemu: 9.2.0.rd2
 socketVMNet: 1.2.2
 alpineLimaISO:
   isoVersion: 0.2.47.rd2
   alpineVersion: 3.23.0
 WSLDistro: "0.95"
 kuberlr: 0.6.1
-helm: 4.1.3
+helm:
+  datasource: github-release-attachments
+  repo: helm/helm
+  version: v4.1.1
+  digest_linux_amd64: 5d4c7623283e6dfb1971957f4b755468ab64917066a8567dd50464af298f4031
+  digest_linux_arm64: 02a5fb7742469d2d132e24cb7c3f52885894043576588c6788b6813297629edd
+  digest_darwin_amd64: 6b8dbb03abb74e9ab8e69ca3f9b6459178be11317d0ac502f922621c05fdc866
+  digest_darwin_arm64: b8f49e105b1d2fd8c8a90ba3fc9af48db91d2d1ca3b9e788352fc7c896bbb71a
+  digest_windows_amd64: 665161eba861d86bdb6969aa15d0d0cac3f04ce950ca12b4ee0552d7967a61fa
+  digest_windows_arm64: bd73ebc89311de201d6d86fc20ced76d7f448579332c54093fc086a2279d905d
 dockerCLI: 29.3.1
 dockerBuildx: 0.33.0
 dockerCompose: 5.1.1