feat(renovate): automerge PRs for patch updates

[niki4]

Description

This PR including:

• Added configuration for renovatebot to auto merge its PRs for patch version update of Go dependency modules.

Before the change we had 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. in the PR description generated by renovatebot. After the change it should be 🚦 Automerge: Enabled

• Added Github Action workflow that triggers the "Go / integration-tests" workflow (which is a mandatory check) on each renovatebot PR update.

• Enabled rollbackPrs - In case if author of the dependency will remove/revoke the latest version, a PR to downgrade the package will be created.

Notes:

• Both automerge and rollbackPrs features enabled on Golang modules updates only.
• renovatebot will still create update PRs for the other types of dependency updates (e.g., actions, java dependencies, etc.), but they will not be automerged and therefore to be reviewed and merged manually.
• Updates of versions 0.x considered as potentially containing breaking changes (not stable) and not auto merged, those PRs to be reviewed and merged manually.

Set up

To make the auto merge feature work, further configuration required:

1. Install to the project repo renovate-approve bot which will mark as reviewed automerge-enabled PRs made by renovatebot, in case all the mandatory PR checks are green.

References:

• https://docs.renovatebot.com/key-concepts/automerge/#automerge-non-major-updates

Checklist

• Tests
• Documentation
• Inner source library needs updating

[niki4]

/it-go

[D074360]

@niki4 Did you able to test the changes in a fork or some other repo?

[D074360]

I don't think updating minor versions is a good idea, as some open source projects don't follow semantic versioning. We can discuss in the daily tomorrow.

[niki4]

matchUpdateTypes set to "patch" only (so, the automerge allowed for cases like "1.1.1 -> 1.1.2", but not minor "1.1.1->1.2.1" and not major "1.1.1->2.1.1" version upgrades).

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[niki4]

/it-go

[niki4]

@niki4 Did you able to test the changes in a fork or some other repo?

I tested it on my fork of the jenkins-library.

Here is the example of the automerged Go module update PR, it has been fully automated created, verified, approved and merged. niki4#40