* Add safeguard timeouts #2804

* Fix unit tests

* Fix unit tests

* Update lib/util/exec/index.ts

Co-authored-by: Michael Kriese <michael.kriese@visualon.de>

* Changes after code review

* Fixes after merge

Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
Co-authored-by: Rhys Arkins <rhys@arkins.net>

Co-authored-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Rhys Arkins <rhys@arkins.net>

Co-authored-by: Michael Kriese <michael.kriese@visualon.de>

`packageUrls` is supposed to be `packageRules` here

Co-authored-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Rhys Arkins <rhys@arkins.net>
Co-authored-by: HonkingGoose <34918129+HonkingGoose@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
Co-authored-by: Sergei Zharinov <zharinov@users.noreply.github.com>

Flips platformAutomerge default to `false`.

BREAKING CHANGE: Platform automerge is no longer enabled by default.

Current implementation tries to use GOPROXY and falls back to Renovate fetching mechanism if no releases found.

The new one is switches to GOPROXY implementaiton when environment variable is set and doesn't fallback.
However, when direct keyword is used, it will use Renovate-native mechanism that fetches directly from GitHub, etc.
When off keyword is encountered or no URLs left, we're done with no releases (i.e. no fallback to Renovate-native mechanism).

BREAKING CHANGE: Go modules lookups will now no longer fallback to Renovate native lookups if GOPROXY is configured and without "direct" explicitly configured.

Add configuration option `detectHostRulesFromEnv`.

BREAKING CHANGE: `hostRules` are no longer automatically derived from env variables such as `NPM_X_TOKEN`. Set `detectHostRulesFromEnv=true` in config to re-enable same functionality.

Co-authored-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Rhys Arkins <rhys@arkins.net>

Co-authored-by: Rhys Arkins <rhys@arkins.net>