chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.142.0

.gitea/workflows/renovate.yaml

@@ -2,26 +2,19 @@ name: renovate
 
 on:
   schedule:
-    - cron: "@hourly"
+    - cron: "@daily"
   push:
     branches:
       - main
 
-# Serialize runs: the hourly schedule and a push to main can otherwise overlap,
-# producing duplicate PRs and concurrent writes to Gitea.
-concurrency:
-  group: renovate
-  cancel-in-progress: false
-
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.226.1@sha256:0b678d3b80ec23a7bf8c967b7796d9df09c50eac7fa16c7b4fd5761a9f4a7be0
+    container: ghcr.io/renovatebot/renovate:43.142.0
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/checkout@v6
       - run: renovate
         env:
-          RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js"
+          RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js" # replace it with your config.js path
-          LOG_LEVEL: "info"
+          LOG_LEVEL: "debug"
-          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
+          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }} # your Revonate bot token
-          RENOVATE_GITHUB_COM_TOKEN: ${{ secrets.RENOVATE_GITHUB_TOKEN }}

config.js

@@ -1,48 +1,8 @@
 module.exports = {
-    "endpoint": "https://code.emmathe.dev/api/v1",
+    "endpoint": "https://code.emmathe.dev/api/v1", // replace it with your actual endpoint
     "gitAuthor": "Renovate Bot <renovate-bot@iam.emmathe.dev>",
     "platform": "gitea",
     "onboardingConfigFileName": ".renovaterc.json",
     "autodiscover": true,
     "optimizeForDisabled": true,
-    "extends": ["config:best-practices"],
-    "schedule": ["* * * * 1-5"],
-    "timezone": "Europe/London",
-    "minimumReleaseAge": "3 days",
-    "labels": ["dependencies"],
-    "reviewers": ["lyrathorpe"],
-    "hostRules": [
-        {
-            // Authenticate to the code.emmathe.dev container registry so Renovate can read and
-            // update digests for private images (e.g. code.emmathe.dev/lyrathorpe/whyisthedlrshut.today
-            // and .../docs-site, pinned in the Terraform repo). Token = a Gitea PAT with read:package;
-            // supplied via the RENOVATE_REGISTRY_TOKEN environment variable on the bot (a PAT for
-            // the "lyrathorpe" account with read:package is sufficient; the registry images are its own).
-            "matchHost": "code.emmathe.dev",
-            "hostType": "docker",
-            "username": "lyrathorpe",
-            "password": process.env.RENOVATE_REGISTRY_TOKEN
-        }
-    ],
-    "prHourlyLimit": 10,
-    "prConcurrentLimit": 10,
-    "branchConcurrentLimit": 10,
-    "packageRules": [
-        {
-            "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
-            "automerge": true
-        },
-        {
-            "matchUpdateTypes": ["major"],
-            "automerge": false
-        }
-    ],
-    "lockFileMaintenance": {
-        "enabled": true,
-        "schedule": ["before 4am on monday"]
-    },
-    "vulnerabilityAlerts": {
-        "enabled": true,
-        "schedule": ["at any time"]
-    }
 };