[Sync] odh to rhds

[zdtsw]

Description

to fix merge conflict
https://github.com/red-hat-data-services/rhods-devops-infra/actions/runs/23894628187/job/69676202347

after this is merge, we should run https://github.com/red-hat-data-services/rhods-devops-infra/actions/workflows/upstream-auto-merge.yaml again without failure

How Has This Been Tested?

Merge criteria:

• The commits are squashed in a cohesive manner and have meaningful messages.
• Testing instructions have been added in the PR body (for PRs involving changes that are not immediately obvious).
• The developer has manually tested the changes and verified that the changes work

Summary by CodeRabbit

• Chores
  • Added Renovate configuration to automate dependency updates.
  • Updated Docker builder stage base image digest.

[github-actions]

Unsigned commits detected! Please sign your commits.

For instructions on how to set up GPG/SSH signing and verify your commits, please see GitHub Documentation.

[coderabbitai]

📝 Walkthrough

Walkthrough

Two configuration updates: addition of .github/renovate.json extending a shared Renovate preset from an external source, and update of the Dockerfile.konflux builder stage base image digest for registry.redhat.io/ubi9/go-toolset:9.7.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Security considerations

Renovate external preset dependency: The new .github/renovate.json delegates configuration to github>red-hat-data-services/konflux-central//renovate/default-renovate.json. Verify that this external source is trustworthy and that updates to that preset won't inadvertently trigger unintended automated changes (e.g., overly aggressive dependency upgrades, unsafe version pinning). Ensure audit logging is enabled if not already present.

Base image digest update: Confirm the new digest for registry.redhat.io/ubi9/go-toolset:9.7 is legitimate and matches expected build artifacts. Verify against the Red Hat registry to exclude potential supply-chain compromise or tag manipulation. No CVE/CWE directly applicable here, but digest verification is critical for container security posture.

🚥 Pre-merge checks | ✅ 1 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title '[Sync] odh to rhds' is vague and does not clearly convey the actual changes, which involve updating Renovate configuration and Docker base image digests.	Use a more specific title that reflects the primary changes, such as 'Add Renovate configuration and update base image digests' or 'Configure Renovate with red-hat-data-services preset'.

✅ Passed checks (1 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[zdtsw]

close in favor of red-hat-data-services#71