fix(renovate): add gomodTidy to org-level postUpdateOptions

[robnester-rh]

Summary

• Adds gomodTidy to postUpdateOptions in the org-level Renovate config
• Ensures Renovate runs go mod tidy after updating Go module dependencies, preventing stale checksums in go.sum from breaking CI
• This was proven effective in go-gather (PR #318) — applying it org-wide so all Go-based repos benefit
• gomodTidy is a no-op for non-Go repos, so this is safe to set globally

Test plan

• Verified in go-gather: PR #309 (go-git v5.17.2) passed CI after gomodTidy was enabled locally
• After merge, confirm Renovate Go module PRs across other repos (e.g. cli, policy) produce clean go.sum files

Ref: EC-1765

Made with Cursor

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 2986a780-7c36-4393-8d7b-15451e029d57

📥 Commits

Reviewing files that changed from the base of the PR and between c2ed4a0 and 3bfa2e7.

📒 Files selected for processing (1)

• config/renovate/renovate.json

---

📝 Walkthrough

Walkthrough

Added a Renovate configuration option to automatically run go mod tidy after Go module updates, ensuring go.sum checksums remain synchronized with the module dependency graph.

Changes

Cohort / File(s)	Summary
Renovate Configuration config/renovate/renovate.json	Added "postUpdateOptions": ["gomodTidy"] to execute go mod tidy post-update for Go modules, keeping checksums in sync.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely summarizes the main change: adding gomodTidy to org-level postUpdateOptions in Renovate configuration.
Description check	✅ Passed	The description is well-related to the changeset, providing context about the fix, rationale, validation evidence, and test plans for enabling gomodTidy in org-level Renovate config.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[st3penta]

I vaguely remember i had this initially, but removed it because it was causing some problems.
However i don't remember exactly which problems was causing, nor if this was the actual root cause, so let's reintroduce it and see how it goes