6 Commits

Include renames

Author	SHA1	Message	Date
lyrathorpe	29706867cd	feat: authenticate Renovate to the private container registry (#54) ... Let the self-hosted Renovate bot authenticate to the `code.emmathe.dev` container registry so it can read and update digests for the **private** images pinned in the Terraform repo — `whyisthedlrshut.today` (dlr) and `docs-site`. Without this, Renovate can't reach those images and the digests never get bumped (they stay pinned but stale). - Adds a `hostRules` entry: `matchHost: code.emmathe.dev`, `hostType: docker`, `username: renovate-bot`, `password: process.env.RENOVATE_REGISTRY_TOKEN`. - Scoped to the docker datasource only — the existing Gitea platform/git auth is untouched. - Digest updates already `automerge` (packageRules) and `pinDigests` is on (config:best-practices), so once auth works these images auto-bump. **Owner action:** create the secret and expose it to the bot as the env var **`RENOVATE_REGISTRY_TOKEN`** — a Gitea PAT (user `renovate-bot`, or adjust the `username` in the rule) with **`read:package`** scope. That's the only thing needed. The images are matched by the Terraform repo's existing `customManager` (docker datasource on `variables.tf`); no change needed there. Reviewed-on: #54	2026-07-06 14:46:35 +01:00
Emma Thorpe	653934dc98	config: tune concurrency, security scheduling, stability, noise ... - Reconcile concurrency limits: prConcurrentLimit 50 -> 10 and branchConcurrentLimit 5 -> 10 (every PR needs a branch, so the old 5 capped effective PRs and made 50 meaningless). - Let vulnerability updates bypass the weekday schedule (vulnerabilityAlerts.schedule = at any time) so weekend CVE fixes are not held until Monday. - Add minimumReleaseAge = 3 days so a release ages before it is opened or automerged (guards against broken/yanked releases). - Drop redundant assignees (same single user as reviewers) -- noise on every PR, including auto-merged ones. Closes #46 Closes #47 Closes #48 Closes #49	2026-06-16 14:44:52 +01:00
lyrathorpe	398094317d	feat(config.js): use renovate best practices	2026-05-07 15:42:00 +01:00
lyrathorpe	0c8ee98205	ci(update-renovate-schedule): don't only run on Mondays	2026-05-07 09:58:34 +01:00
lyrathorpe	8b5b13dfff	refactor: add global sane rules	2026-04-27 11:55:35 +01:00
lyrathorpe	99cb32580d	feat(config.js): add renovate config	2026-04-25 12:28:21 +01:00