Compare commits

...

3 Commits
0.1.0 ... 0.3.0

Author SHA1 Message Date
bee0ee03a4 feat: enable semantic commits (#4)
All checks were successful
CD / Release (push) Successful in 15s
Reviewed-on: #4
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2025-10-10 18:04:31 +02:00
d9c0a19458 fix: docker-compose label to just be docker (#3)
All checks were successful
CD / Release (push) Successful in 6s
The label added for docker-compose related package updates is supposed to be "docker" and not "docker-compose".

Reviewed-on: #3
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2025-10-08 19:22:48 +02:00
4bc8c6e40f feat: pin digest of GitHub action updates (#2)
All checks were successful
CD / Release (push) Successful in 5s
We always want to pin GitHub actions to a digest, to avoid attack vectors where existing tags are being re-used and their implementation replaced with malicious code.
As described in [renovate's documentation](https://docs.renovatebot.com/modules/manager/github-actions/#digest-pinning-and-updating), adding the "helpers:pinGitHubActionDigests" to the extends automatically forces renovate to always pin digests.

Reviewed-on: #2
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2025-10-08 18:54:50 +02:00
3 changed files with 4 additions and 2 deletions

View File

@@ -1,5 +1,6 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": ["helpers:pinGitHubActionDigests"],
"packageRules": [
{
"matchManagers": ["github-actions"],

View File

@@ -1,4 +1,5 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"dependencyDashboard": true
"dependencyDashboard": true,
"semanticCommits": "enabled"
}

View File

@@ -4,6 +4,6 @@
"digest": {
"enabled": true
},
"addLabels": ["deps", "docker-compose"]
"addLabels": ["deps", "docker"]
}
}