chore(deps): pin dependencies (#10 )

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | pinDigest | -> `8e8c483` | | [azure/k8s-deploy](https://github.com/azure/k8s-deploy) | action | pinDigest | -> `6f7c489` | | [azure/k8s-lint](https://github.com/azure/k8s-lint) | action | pinDigest | -> `6aefe50` | | [azure/k8s-set-context](https://github.com/azure/k8s-set-context) | action | pinDigest | -> `ae59a72` | | [azure/setup-helm](https://github.com/azure/setup-helm) | action | pinDigest | -> `1a275c3` | | [azure/setup-kubectl](https://github.com/azure/setup-kubectl) | action | pinDigest | -> `776406b` | | [helmfile/helmfile-action](https://github.com/helmfile/helmfile-action) | action | pinDigest | -> `f64d5db` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: #10 Reviewed-by: t.behrendt <t.behrendt@noreply.localhost> Co-authored-by: Renovate Bot <renovate@t00n.de> Co-committed-by: Renovate Bot <renovate@t00n.de>
ci(renovate): switch to shared configs (#9 )
2025-12-07 09:33:17 +01:00 · 2025-12-04 17:16:37 +01:00
3 changed files with 25 additions and 21 deletions
--- a/.gitea/workflows/cd.yaml
+++ b/.gitea/workflows/cd.yaml
@@ -41,7 +41,7 @@ jobs:
      has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
      has_k8s: ${{ steps.check-k8s.outputs.exists }}
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
      - name: Check if helmfile.yaml exists
        id: check-helmfile
        run: |
@@ -68,15 +68,15 @@ jobs:
    needs: detect-service-type
    if: needs.detect-service-type.outputs.has_k8s == 'true'
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
        with:
          ref: ${{ inputs.deploy_branch }}
      - uses: ./.gitea/actions/extract-namespace-from-repo-name
        id: namespace
        with:
          repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@v4
-      - uses: azure/k8s-set-context@v4
+      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
+      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
        with:
          method: kubeconfig
          kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -104,7 +104,7 @@ jobs:
            echo "No custom secrets to create"
          fi
      - name: Deploy Kubernetes manifests
-        uses: azure/k8s-deploy@v5.0.4
+        uses: azure/k8s-deploy@6f7c489cecd8da05646259d9fa3daae92e095c7b # v5.0.4
        with:
          action: deploy
          manifests: "${{ inputs.k8s_dir }}"
@@ -119,16 +119,16 @@ jobs:
      needs.detect-service-type.outputs.has_k8s == 'true' && 
      inputs.skip_helm_deployment != 'true'
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
        with:
          ref: ${{ inputs.deploy_branch }}
      - uses: ./.gitea/actions/extract-namespace-from-repo-name
        id: namespace
        with:
          repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@v4
-      - uses: azure/setup-helm@v4
-      - uses: azure/k8s-set-context@v4
+      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
+      - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
+      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
        with:
          method: kubeconfig
          kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -156,7 +156,7 @@ jobs:
            echo "No custom secrets to create"
          fi
      - name: Deploy Helm
-        uses: helmfile/helmfile-action@v2
+        uses: helmfile/helmfile-action@f64d5db9f8660aae0205b5fcfc56577d44acefab # v2
        with:
          helmfile-args: apply

--- a/.gitea/workflows/ci.yaml
+++ b/.gitea/workflows/ci.yaml
@@ -26,7 +26,7 @@ jobs:
      has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
      has_k8s: ${{ steps.check-k8s.outputs.exists }}
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
      - name: Check if helmfile.yaml exists
        id: check-helmfile
        run: |
@@ -53,18 +53,18 @@ jobs:
    needs: detect-service-type
    if: needs.detect-service-type.outputs.has_k8s == 'true'
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
      - uses: ./.gitea/actions/extract-namespace-from-repo-name
        id: namespace
        with:
          repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@v4
-      - uses: azure/k8s-set-context@v4
+      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
+      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
        with:
          method: kubeconfig
          kubeconfig: ${{ secrets.KUBECONFIG }}
      - name: Validate k8s manifests
-        uses: azure/k8s-lint@v3
+        uses: azure/k8s-lint@6aefe5066f95e73d2b140d8835cc95583b886989 # v3
        with:
          namespace: ${{ steps.namespace.outputs.namespace }}
          lintType: dryrun
@@ -78,19 +78,19 @@ jobs:
      needs.detect-service-type.outputs.has_k8s == 'true' && 
      inputs.skip_helm_validation != 'true'
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
      - uses: ./.gitea/actions/extract-namespace-from-repo-name
        id: namespace
        with:
          repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@v4
-      - uses: azure/setup-helm@v4
-      - uses: azure/k8s-set-context@v4
+      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
+      - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
+      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
        with:
          method: kubeconfig
          kubeconfig: ${{ secrets.KUBECONFIG }}
      - name: Validate Helm
-        uses: helmfile/helmfile-action@v2.1.0
+        uses: helmfile/helmfile-action@f64d5db9f8660aae0205b5fcfc56577d44acefab # v2.1.0
        with:
          helmfile-args: diff

--- a/renovate.json
+++ b/renovate.json
@@ -1,3 +1,7 @@
 {
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "local>t.behrendt/renovate-configs:common",
+    "local>t.behrendt/renovate-configs:action"
+  ]
 }