feat: make k8s paths more flexible (#9 )

This PR makes matching of k8s manifests more flexible. Reviewed-on: #9 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
fix: k8s file matching (#8 )
2025-10-15 19:44:23 +02:00 · 2025-10-15 11:23:42 +02:00 · 2025-10-12 17:55:46 +02:00 · 2025-10-12 17:21:57 +02:00 · 2025-10-11 08:51:03 +02:00 · 2025-10-10 18:04:31 +02:00
5 changed files with 14 additions and 4 deletions
--- a/action.json
+++ b/action.json
@@ -1,5 +1,6 @@
 {
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["helpers:pinGitHubActionDigests"],
  "packageRules": [
    {
      "matchManagers": ["github-actions"],
--- a/common.json
+++ b/common.json
@@ -1,4 +1,5 @@
 {
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "dependencyDashboard": true
+  "dependencyDashboard": true,
+  "semanticCommits": "enabled"
 }
--- a/docker-compose.json
+++ b/docker-compose.json
@@ -4,6 +4,6 @@
    "digest": {
      "enabled": true
    },
-    "addLabels": ["deps", "docker-compose"]
+    "addLabels": ["deps", "docker"]
  }
 }
--- a/helm.json
+++ b/helm.json
@@ -13,5 +13,13 @@
  "helmfile": {
    "enabled": true,
    "addLabels": ["deps", "helm"]
-  }
+  },
+  "hostRules": [
+    {
+      "matchHost": "https://gitea.t000-n.de/api/packages/t.behrendt/helm",
+      "hostType": "helm",
+      "username": "{{ secrets.HELM_REGISTRY_USER }}",
+      "password": "{{ secrets.HELM_REGISTRY_PASSWORD }}"
+    }
+  ]
 }
--- a/k8s.json
+++ b/k8s.json
@@ -2,7 +2,7 @@
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "kubernetes": {
    "enabled": true,
-    "fileMatch": ["^k8s/*\\.json$"],
+    "managerFilePatterns": ["(^|/)k8s/.*\\.ya?ml$"],
    "labels": ["deps", "k8s"]
  }
 }
Author	SHA1	Message	Date
Timo Behrendt	9b5ee7387a	feat: make k8s paths more flexible (#9 ) All checks were successful CD / Release (push) Successful in 14s Details This PR makes matching of k8s manifests more flexible. Reviewed-on: #9 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2025-10-15 19:44:23 +02:00
t.behrendt	957db57cca	fix: k8s file matching (#8 ) All checks were successful CD / Release (push) Successful in 15s Details Reviewed-on: #8 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: t.behrendt <t.behrendt@t00n.de> Co-committed-by: t.behrendt <t.behrendt@t00n.de>	2025-10-15 11:23:42 +02:00
Timo Behrendt	1d3e7df2fa	fix: private helm registry (#7 ) All checks were successful CD / Release (push) Successful in 6s Details Fixing the setup for the private helm registry. Instead of providing the "host" as the name of the field would suggest, one has to provide a full URL, which also becomes clear, when reading the [documentation](https://docs.renovatebot.com/getting-started/private-packages/). Reviewed-on: #7 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2025-10-12 17:55:46 +02:00
Timo Behrendt	2df0f6b2c3	feat: add private helm repo support (#6 ) All checks were successful CD / Release (push) Successful in 14s Details Adding support for our private helm repository enabling updates of private resources. Reviewed-on: #6 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2025-10-12 17:21:57 +02:00
Timo Behrendt	1fd6dea387	fix: k8s config to reference yaml file instead of json (#5 ) All checks were successful CD / Release (push) Successful in 12s Details Ups, something got messed up during migration. k8s manifests are of course of file type yaml and not json. Reviewed-on: #5 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2025-10-11 08:51:03 +02:00
Timo Behrendt	bee0ee03a4	feat: enable semantic commits (#4 ) All checks were successful CD / Release (push) Successful in 15s Details Reviewed-on: #4 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2025-10-10 18:04:31 +02:00
Timo Behrendt	d9c0a19458	fix: docker-compose label to just be docker (#3 ) All checks were successful CD / Release (push) Successful in 6s Details The label added for docker-compose related package updates is supposed to be "docker" and not "docker-compose". Reviewed-on: #3 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2025-10-08 19:22:48 +02:00
Timo Behrendt	4bc8c6e40f	feat: pin digest of GitHub action updates (#2 ) All checks were successful CD / Release (push) Successful in 5s Details We always want to pin GitHub actions to a digest, to avoid attack vectors where existing tags are being re-used and their implementation replaced with malicious code. As described in [renovate's documentation](https://docs.renovatebot.com/modules/manager/github-actions/#digest-pinning-and-updating), adding the "helpers:pinGitHubActionDigests" to the extends automatically forces renovate to always pin digests. Reviewed-on: #2 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2025-10-08 18:54:50 +02:00