ci: improve dependancy mgmt (#19)

* ci: update .github configurations

* ci: update github workflows

.github/CODEOWNERS

@@ -1 +1 @@
-@beholdenkey
+* @beholdenkey

.github/DCO

@@ -0,0 +1,35 @@
+Developer Certificate of Origin
+Version 1.1
+
+Copyright (C) 2004, 2006 The Linux Foundation and its contributors.
+660 York Street, Suite 102,
+San Francisco, CA 94110 USA
+
+Everyone is permitted to copy and distribute verbatim copies of this
+license document, but changing it is not allowed.
+
+Developer's Certificate of Origin 1.1
+
+By making a contribution to this project, I certify that:
+
+(a) The contribution was created in whole or in part by me and I
+    have the right to submit it under the open source license
+    indicated in the file; or
+
+(b) The contribution is based upon previous work that, to the best
+    of my knowledge, is covered under an appropriate open source
+    license and I have the right under that license to submit that
+    work with modifications, whether created in whole or in part
+    by me, under the same open source license (unless I am
+    permitted to submit under a different license), as indicated
+    in the file; or
+
+(c) The contribution was provided directly to me by some other
+    person who certified (a), (b) or (c) and I have not modified
+    it.
+
+(d) I understand and agree that this project and the contribution
+    are public and that a record of the contribution (including all
+    personal information I submit with it, including my sign-off) is
+    maintained indefinitely and may be redistributed consistent with
+    this project or the open source license(s) involved.

.github/SECURITY.md

@@ -0,0 +1 @@
+# Security Policy

.github/labeler.yaml

@@ -0,0 +1,21 @@
+---
+area/infra:
+  - changed-files:
+      - any-glob-to-any-file: "**/*.tf"
+      - any-glob-to-any-file: "**/*.hcl"
+area/ci:
+  - changed-files:
+      - any-glob-to-any-file: ".github/**/*"
+      - any-glob-to-any-file: ".pre-commit-config.yaml"
+area/docs:
+  - changed-files:
+      - any-glob-to-any-file: "**/*.md"
+renovate/github-action:
+  - changed-files:
+      - any-glob-to-any-file: ".github/actions/**/*"
+renovate/terraform:
+  - changed-files:
+      - any-glob-to-any-file: "**/*.tf"
+renovate/pre-commit:
+  - changed-files:
+      - any-glob-to-any-file: ".pre-commit-config.yaml"

.github/labels.yaml

@@ -0,0 +1,15 @@
+---
+# Area
+- {name: "area/infra", color: "b60205"}
+- {name: "area/ci", color: "b60205"}
+- {name: "area/docs", color: "b60205"}
+# Renovate
+- {name: "renovate/github-action", color: "027fa0"}
+- {name: "renovate/github-release", color: "027fa0"}
+- {name: "renovate/terraform", color: "027fa0"}
+- {name: "renovate/pre-commit", color: "0e8a16"}
+# Semantic Type
+- {name: "type/patch", color: "ffec19"}
+- {name: "type/minor", color: "ff9800"}
+- {name: "type/major", color: "f6412d"}
+- {name: "type/break", color: "f6412d"}

.github/renovate.json

@@ -0,0 +1,27 @@
+{
+    "extends": [
+      "config:recommended",
+      "docker:enableMajor",
+      ":disableRateLimiting",
+      ":dependencyDashboard",
+      ":enablePreCommit",
+      ":semanticCommits",
+      ":automergeBranchPush"
+    ],
+    "enabled": true,
+    "dependencyDashboard": true,
+    "dependencyDashboardTitle": "Renovate Dashboard 🤖",
+    "suppressNotifications": ["prEditedNotification", "prIgnoreNotification"],
+    "rebaseWhen": "conflicted",
+    "commitBodyTable": true,
+    "platformCommit": true,
+    "gitAuthor": "Justin Bailey <[email protected]>",
+    "commitBody": "Signed-off-by: Justin Bailey <[email protected]>",
+    "helm-values": {
+      "fileMatch": ["./.+\\.yaml$"]
+    },
+    "kubernetes": {
+      "fileMatch": ["\\.yaml$"],
+      "ignorePaths": [".github"]
+    }
+  }

.github/workflows/label-sync.yaml

@@ -0,0 +1,33 @@
+---
+  # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+  name: "Label Sync"
+
+  on:
+    workflow_dispatch:
+    push:
+      branches: ["main"]
+      paths: [".github/labels.yaml"]
+    schedule:
+      - cron: "0 0 * * *"
+
+  permissions:
+    issues: write
+    contents: read
+
+  jobs:
+    label-sync:
+      name: Label Sync
+      runs-on: ubuntu-latest
+      steps:
+        - name: Checkout
+          uses: actions/checkout@v4
+          with:
+            token: ${{ secrets.GITHUB_TOKEN }}
+            sparse-checkout: .github/labels.yaml
+
+        - name: Sync Labels
+          uses: EndBug/label-sync@v2
+          with:
+            request-token: ${{ secrets.GITHUB_TOKEN }}
+            config-file: .github/labels.yaml
+            delete-other-labels: true

.github/workflows/labeler.yaml

@@ -0,0 +1,21 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: "Labeler"
+
+on:
+  workflow_dispatch:
+  pull_request_target:
+    branches: ["main"]
+
+jobs:
+  labeler:
+    name: Labeler
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - name: Labeler
+        uses: actions/labeler@v5
+        with:
+          configuration-path: .github/labeler.yaml

.github/workflows/pre-commit.yaml

@@ -6,8 +6,8 @@ on:
       - main
 
 env:
-  TERRAFORM_DOCS_VERSION: v0.17.0
-  TFLINT_VERSION: v0.50.0
+  TERRAFORM_DOCS_VERSION: v0.18.0
+  TFLINT_VERSION: v0.53.0
 
 jobs:
   collectInputs: