ci: bump repository configuration from template-refs/tags/v2.3.1

.github/workflows/.ci-metadata.json

@@ -1,3 +1,3 @@
 {
-  "template-version": "v2.0.0"
+  "template-version": "v2.3.1"
 }

.github/workflows/agreements.yaml

@@ -4,14 +4,15 @@ on:
     types: [created]
   pull_request_target:
     types: [opened, closed, synchronize]
-permissions:
-  actions: read
-  contents: read
-  pull-requests: read
-  statuses: read
+
 jobs:
   call-workflow-agreements:
-    uses: splunk/addonfactory-github-workflows/.github/workflows/reusable-agreements.yaml@v1
+    uses: splunk/addonfactory-github-workflows/.github/workflows/reusable-agreements.yaml@v1.4
+    permissions:
+      actions: read
+      contents: read
+      pull-requests: write
+      statuses: read
     secrets:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       PERSONAL_ACCESS_TOKEN: ${{ secrets.PAT_CLATOOL }}

.github/workflows/build-test-release.yml

@@ -25,7 +25,7 @@ permissions:
 jobs:
   call-workflow:
     if: github.event.action != 'labeled' || github.actor != 'renovate[bot]'
-    uses: splunk/addonfactory-workflow-addon-release/.github/workflows/reusable-build-test-release.yml@v4.0
+    uses: splunk/addonfactory-workflow-addon-release/.github/workflows/reusable-build-test-release.yml@v4.5
     secrets:
       GH_TOKEN_ADMIN: ${{ secrets.GH_TOKEN_ADMIN }}
       SEMGREP_PUBLISH_TOKEN: ${{ secrets.SEMGREP_PUBLISH_TOKEN }}
@@ -39,3 +39,5 @@ jobs:
       SA_GH_USER_EMAIL: ${{ secrets.SA_GH_USER_EMAIL }}
       SA_GPG_PRIVATE_KEY: ${{ secrets.SA_GPG_PRIVATE_KEY }}
       SA_GPG_PASSPHRASE: ${{ secrets.SA_GPG_PASSPHRASE }}
+      SPL_COM_USER: ${{ secrets.SPL_COM_USER }}
+      SPL_COM_PASSWORD: ${{ secrets.SPL_COM_PASSWORD }}

renovate.json

@@ -3,10 +3,17 @@
     "config:base",
     "group:all",
     ":semanticCommitTypeAll(chore)",
-    "schedule:earlyMondays",
-    ":disableDependencyDashboard"
+    ":prHourlyLimit2"
   ],
+  "reviewers": ["team:products-gdi-addons-adminrepo"],
+  "schedule": ["every 2 weeks on Sunday"],
+  "lockFileMaintenance": {
+    "enabled": true,
+    "schedule": ["every 2 weeks on Sunday"]
+  },
   "enabledManagers": ["poetry", "npm", "gradle"],
+  "rangeStrategy": "pin",
+  "prConcurrentLimit": 5,
   "packageRules": [
     {
       "matchPackageNames": ["urllib3"],