20 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
lyrathorpe	29706867cd	feat: authenticate Renovate to the private container registry (#54) ... Let the self-hosted Renovate bot authenticate to the `code.emmathe.dev` container registry so it can read and update digests for the **private** images pinned in the Terraform repo — `whyisthedlrshut.today` (dlr) and `docs-site`. Without this, Renovate can't reach those images and the digests never get bumped (they stay pinned but stale). - Adds a `hostRules` entry: `matchHost: code.emmathe.dev`, `hostType: docker`, `username: renovate-bot`, `password: process.env.RENOVATE_REGISTRY_TOKEN`. - Scoped to the docker datasource only — the existing Gitea platform/git auth is untouched. - Digest updates already `automerge` (packageRules) and `pinDigests` is on (config:best-practices), so once auth works these images auto-bump. **Owner action:** create the secret and expose it to the bot as the env var **`RENOVATE_REGISTRY_TOKEN`** — a Gitea PAT (user `renovate-bot`, or adjust the `username` in the rule) with **`read:package`** scope. That's the only thing needed. The images are matched by the Terraform repo's existing `customManager` (docker datasource on `variables.tf`); no change needed there. Reviewed-on: #54	2026-07-06 14:46:35 +01:00
lyrathorpe	1b4c1a26f8	Merge pull request 'chore(deps): update actions/checkout action to v7' (#53) from renovate/actions-checkout-7.x into main ... Reviewed-on: #53	2026-06-22 16:27:51 +01:00
lyrathorpe	3f2d51015b	Merge pull request 'config: tune concurrency, security scheduling, stability, noise' (#52) from config/tuning into main ... Reviewed-on: #52	2026-06-16 14:52:18 +01:00
lyrathorpe	75ee02da0c	Merge pull request 'ci(renovate): serialize runs, quiet logs, clean config-file env' (#51) from ci/workflow-hardening into main ... Reviewed-on: #51	2026-06-16 14:51:50 +01:00
lyrathorpe	5bdc1afe60	Merge pull request 'fix(renovate.yaml): bump to hourly runs' (#41) from fix/schedule into main ... Reviewed-on: #41	2026-06-16 12:00:53 +01:00
lyrathorpe	6b7a869713	fix(renovate.yaml): bump to hourly runs ... prevents 24h lag in lockfile maintenance, etc	2026-06-16 12:00:35 +01:00
lyrathorpe	b1a03e240f	Merge pull request 'chore(deps): pin actions/checkout action to de0fac2' (#10) from renovate/pin-dependencies into main ... Reviewed-on: #10	2026-05-07 15:49:18 +01:00
lyrathorpe	785212beb7	Merge pull request 'feat(config.js): use renovate best practices' (#9) from feat/renovate-best-practices into main ... Reviewed-on: #9	2026-05-07 15:42:19 +01:00
lyrathorpe	398094317d	feat(config.js): use renovate best practices	2026-05-07 15:42:00 +01:00
lyrathorpe	b1d2144ae8	Merge pull request 'ci(update-renovate-schedule): don't only run on Mondays' (#6) from chore/update-schedule into main ... Reviewed-on: #6	2026-05-07 09:58:58 +01:00
lyrathorpe	0c8ee98205	ci(update-renovate-schedule): don't only run on Mondays	2026-05-07 09:58:34 +01:00
lyrathorpe	8b5b13dfff	refactor: add global sane rules	2026-04-27 11:55:35 +01:00
lyrathorpe	087b3ff9f9	Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.142.0' (#3) from renovate/ghcr.io-renovatebot-renovate-43.x into main ... Reviewed-on: #3	2026-04-27 10:39:11 +01:00
lyrathorpe	dad087bdbe	ci: auto merge certain PRs	2026-04-27 10:32:25 +01:00
lyrathorpe	63013b4a4a	feat(renovate.yaml): add GitHub token	2026-04-27 10:23:18 +01:00
lyrathorpe	c4483ad23b	Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.141.6' (#2) from renovate/ghcr.io-renovatebot-renovate-43.x into main ... Reviewed-on: #2	2026-04-27 10:14:50 +01:00
lyrathorpe	ea841b9ca0	Merge pull request 'chore: Configure Renovate' (#1) from renovate/configure into main ... Reviewed-on: #1	2026-04-25 12:41:19 +01:00
lyrathorpe	3bfb628aa3	fix: fix config path	2026-04-25 12:34:20 +01:00
lyrathorpe	54acce7b6e	feat: add renovate workflow	2026-04-25 12:31:44 +01:00
lyrathorpe	99cb32580d	feat(config.js): add renovate config	2026-04-25 12:28:21 +01:00