chore(deps): update https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment action to v0.1.39

fix: handling of private package in action automerge and disabling of minAge (#69 )
Reviewed-on: #69 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2026-06-21 15:18:28 +00:00 · 2026-06-21 16:59:14 +02:00 · 2026-06-20 21:29:41 +02:00 · 2026-06-20 21:28:46 +02:00 · 2026-06-20 21:22:00 +02:00 · 2026-06-20 21:02:06 +02:00
4 changed files with 34 additions and 19 deletions
@@ -11,12 +11,12 @@ jobs:
    name: Release
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          fetch-depth: 0
      - name: Increment tag
        id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@b8806ee0141a44be30e8734dff15001361be100c # 0.1.35
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@e393dbb067c09fd43519392572ccf63b66cba92d # 0.1.39
        with:
          token: ${{ secrets.GITEA_TOKEN }}
          prerelease: ${{ github.event_name == 'workflow_dispatch' }}
@@ -17,7 +17,7 @@ jobs:
          - "docker-compose.json"
          - "bun-npm.json"
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      - name: Validate "${{ matrix.json-file }}"
        uses: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action@6bf2c1355ac4430a6fb77befd36fb95243fcaa3a # 0.1.12
        with:
@@ -10,10 +10,11 @@
      "matchManagers": ["github-actions"],
      "matchUpdateTypes": ["minor", "patch"],
      "matchPackageNames": [
-        "https://gitea.t000-n.de/t.behrendt/actions/*",
+        "t.behrendt/actions",
-        "https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment",
+        "t.behrendt/actions/*",
-        "https://gitea.t000-n.de/t.behrendt/k_deploy_workflows",
+        "t.behrendt/conventional-semantic-git-tag-increment",
-        "https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action",
+        "t.behrendt/k_deploy_workflows",
        "t.behrendt/validate-json-by-json-schema-action",
        "actions/checkout",
        "actions/cache",
@@ -2,24 +2,38 @@
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "dependencyDashboard": true,
  "semanticCommits": "enabled",
-  "extends": ["config:best-practices", ":semanticCommitTypeAll(chore)"],
+  "extends": [
    "config:recommended",
    "docker:pinDigests",
    "helpers:pinGitHubActionDigests",
    ":configMigration",
    ":pinDevDependencies",
    "abandonments:recommended",
    ":maintainLockFilesWeekly",
    ":semanticCommitTypeAll(chore)"
  ],
  "packageRules": [
    {
-      "description": "Don't update dependencies unless they are at least 7 days old",
+      "description": "Don't update dependencies unless they are at least 7 days old (except for internal deps).",
-      "matchPackageNames": ["*"],
+      "matchPackageNames": [
        "!t.behrendt/**"
      ],
      "minimumReleaseAge": "7 days",
      "minimumReleaseAgeBehaviour": "timestamp-required",
      "internalChecksFilter": "strict"
    },
    {
      "description": "Exempt local dependencies from the minimum release age (last rule wins over earlier packageRules for the same options)",
      "matchPackageNames": ["/^(https:\\/\\/)?gitea\\.t000-n\\.de/"],
      "minimumReleaseAge": "0 days",
      "internalChecksFilter": "none"
    }
  ],
  "osvVulnerabilityAlerts": true,
  "dependencyDashboardOSVVulnerabilitySummary": "all",
  "vulnerabilityAlerts": {
-    "enabled": true
+    "enabled": true,
    "automerge": true,
    "platformAutomerge": true,
    "automergeType": "pr",
    "addLabels": [
      "automerge",
      "security"
    ],
    "vulnerabilityFixStrategy": "lowest"
  }
 }
Author	SHA1	Message	Date
renovate-bot	bb9979e7a0	chore(deps): update https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment action to v0.1.39 CI / Test (action.json) (pull_request) Successful in 12s Details CI / Test (bun-npm.json) (pull_request) Successful in 11s Details CI / Test (docker-compose.json) (pull_request) Successful in 11s Details CI / Test (helm.json) (pull_request) Successful in 10s Details CI / Test (k8s.json) (pull_request) Successful in 11s Details CI / Test (common.json) (pull_request) Successful in 1m15s Details	2026-06-21 15:18:28 +00:00
t.behrendt	229212cb6e	fix: handling of private package in action automerge and disabling of minAge (#69 ) CD / Release (push) Successful in 5s Details Reviewed-on: #69 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-21 16:59:14 +02:00
renovate-bot	49996d1108	chore(deps): update actions/checkout action to v7 (#65 ) CD / Release (push) Successful in 5s Details This PR contains the following updates: \| Package \| Type \| Update \| Change \| \|---\|---\|---\|---\| \| [actions/checkout](https://github.com/actions/checkout) \| action \| major \| `v6.0.3` → `v7.0.0` \| --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://github.com/actions/checkout/compare/v6.0.3...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](https://github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#2458](https://github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2460](https://github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2461](https://github.com/actions/checkout/pull/2461) - Bump [@actions/core](https://github.com/actions/core) and [@actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://github.com/dependabot)\[bot] in [#2459](https://github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://github.com/aiqiaoy) in [#2463](https://github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2462](https://github.com/actions/checkout/pull/2462) </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41LjQiLCJ1cGRhdGVkSW5WZXIiOiI0My41LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImFjdGlvbiIsImRlcHMiXX0=--> Reviewed-on: #65 Reviewed-by: t.behrendt <2+t.behrendt@noreply.localhost> Co-authored-by: Renovate Bot <renovate@t00n.de> Co-committed-by: Renovate Bot <renovate@t00n.de>	2026-06-20 21:29:41 +02:00
t.behrendt	78ad0f0588	fix: ignore min age for internal deps (#68 ) CD / Release (push) Successful in 23s Details Reviewed-on: #68 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-20 21:28:46 +02:00
t.behrendt	f8788986cb	feat(sec): add vulnerabilities to dashboard (#67 ) CD / Release (push) Successful in 28s Details Reviewed-on: #67 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-20 21:22:00 +02:00
t.behrendt	444178a987	feat(sec): add sec label and allow automerge (#66 ) CD / Release (push) Successful in 6s Details Reviewed-on: #66 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-20 21:02:06 +02:00