.github: Only update go.mod for Go minor releases

[ port of cilium/cilium@91d7a49 ]

The goal here is to allow developer toolchains to have more flexibility
around the specific version of Go compared with the latest patch
releases.  Note that all of the real-world code and all tests will
continue to be updated to use the latest Go versions, it's just the
go.mod that will start to drift, since the code can actually compile
with earlier versions of Go; we don't require specific patch versions
based on the set of standard library features used in the code.

Signed-off-by: Mahe Tardy <[email protected]>

.github/renovate.json5

@@ -304,6 +304,30 @@
       ]
     },
     // ignore deps section
+    {
+      // Avoid updating patch releases of golang in go.mod
+      "enabled": false,
+      // could use "**/go.mod" but /docs has a go.mod
+      "matchFileNames": [
+        "go.mod",
+        "api/go.mod",
+        "pkg/k8s/go.mod",
+        "contrib/rthooks/tetragon-oci-hook/go.mod",
+      ],
+      "matchDepNames": [
+        "go"
+      ],
+      "matchDatasources": [
+        "golang-version"
+      ],
+      "matchUpdateTypes": [
+        "patch"
+      ],
+      matchBaseBranches: [
+        "main",
+        "v1.0"
+      ]
+    },
     {
       // do not allow any updates for major.minor for LVH, they will be done by maintainers
       "enabled": false,