chore(deps): update https://gitea.t000-n.de/t.behrendt/actions action to v0.2.6

Reviewed-on: #69
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>

.gitea/workflows/cd.yaml

@@ -11,15 +11,15 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@af46017d0af5fd6af4425f8e6961f14280a1acd1 # 0.1.26
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@b8806ee0141a44be30e8734dff15001361be100c # 0.1.35
         with:
           token: ${{ secrets.GITEA_TOKEN }}
           prerelease: ${{ github.event_name == 'workflow_dispatch' }}
-      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@8973a9f9ff51c16b937364e0047e7ad07e937d3f # 0.1.4
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@d658186b7db91d5a93dec78794c8585fa98af79c # 0.2.6
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/ci.yaml

@@ -15,9 +15,10 @@ jobs:
           - "helm.json"
           - "common.json"
           - "docker-compose.json"
+          - "bun-npm.json"
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Validate "${{ matrix.json-file }}"
-        uses: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action@6fe6639f0bb3e2964311ea7b0fbee0adc8514b03 # 0.1.10
+        uses: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action@6bf2c1355ac4430a6fb77befd36fb95243fcaa3a # 0.1.12
         with:
           json-file: "./${{ matrix.json-file }}"

action.json

@@ -5,6 +5,41 @@
     {
       "matchManagers": ["github-actions"],
       "addLabels": ["deps", "action"]
+    },
+    {
+      "matchManagers": ["github-actions"],
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchPackageNames": [
+        "t.behrendt/actions",
+        "t.behrendt/actions/*",
+        "t.behrendt/conventional-semantic-git-tag-increment",
+        "t.behrendt/k_deploy_workflows",
+        "t.behrendt/validate-json-by-json-schema-action",
+
+        "actions/checkout",
+        "actions/cache",
+        "actions/cache/*",
+        "actions/setup-go",
+
+        "azure/setup-kubectl",
+        "azure/setup-helm",
+        "azure/k8s-set-context",
+        "azure/k8s-create-secret",
+        "azure/k8s-deploy",
+        "azure/k8s-lint",
+        
+        "helmfile/helmfile-action",
+
+        "docker/setup-buildx-action",
+        "docker/login-action",
+        "docker/build-push-action",
+
+        "oven-sh/setup-bun"
+      ],
+      "automerge": true,
+      "platformAutomerge": true,
+      "automergeType": "pr",
+      "addLabels": ["automerge"]
     }
   ]
 }

bun-npm.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["local>t.behrendt/renovate-configs:common"],
+  "packageRules": [
+    {
+      "description": "Group all minor and patch updates together",
+      "groupName": "all non-major dependencies",
+      "groupSlug": "all-minor-patch",
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchManagers": ["npm", "bun"]
+    },
+    {
+      "description": "Group Bun releases",
+      "groupName": "bun version",
+      "groupSlug": "bun-version",
+      "matchDatasources": ["github-tags", "docker"],
+      "matchPackageNames": ["docker.io/oven/bun", "oven-sh/bun", "Bun"]
+    }
+  ]
+}

common.json

@@ -2,18 +2,38 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "dependencyDashboard": true,
   "semanticCommits": "enabled",
-  "extends": ["config:best-practices", ":semanticCommitTypeAll(chore)"],
+  "extends": [
+    "config:recommended",
+    "docker:pinDigests",
+    "helpers:pinGitHubActionDigests",
+    ":configMigration",
+    ":pinDevDependencies",
+    "abandonments:recommended",
+    ":maintainLockFilesWeekly",
+    ":semanticCommitTypeAll(chore)"
+  ],
   "packageRules": [
     {
-      "description": "Don't update dependencies unless they are at least 7 days old",
+      "description": "Don't update dependencies unless they are at least 7 days old (except for internal deps).",
+      "matchPackageNames": [
+        "!t.behrendt/**"
+      ],
       "minimumReleaseAge": "7 days",
       "minimumReleaseAgeBehaviour": "timestamp-required",
       "internalChecksFilter": "strict"
-    },
-    {
-      "description": "Exempt local dependencies from the minimum release age",
-      "matchPackageNames": ["/^(https:\\/\\/)?gitea\\.t000-n\\.de/"],
-      "minimumReleaseAge": null
     }
-  ]
+  ],
+  "osvVulnerabilityAlerts": true,
+  "dependencyDashboardOSVVulnerabilitySummary": "all",
+  "vulnerabilityAlerts": {
+    "enabled": true,
+    "automerge": true,
+    "platformAutomerge": true,
+    "automergeType": "pr",
+    "addLabels": [
+      "automerge",
+      "security"
+    ],
+    "vulnerabilityFixStrategy": "lowest"
+  }
 }