ci: use reusable release git tag action

.gitea/workflows/cd.yaml

@@ -4,22 +4,20 @@ on:
   push:
     branches:
       - main
-  workflow_dispatch:
 
 jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@b8806ee0141a44be30e8734dff15001361be100c # 0.1.35
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@0.1.1
         with:
           token: ${{ secrets.GITEA_TOKEN }}
-          prerelease: ${{ github.event_name == 'workflow_dispatch' }}
-      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@38c1bbd8bad3e7965744d03de85faa4a5b808d1b # 0.2.4
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@0.0.3
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/ci.yaml

@@ -15,10 +15,9 @@ jobs:
           - "helm.json"
           - "common.json"
           - "docker-compose.json"
-          - "bun-npm.json"
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
       - name: Validate "${{ matrix.json-file }}"
-        uses: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action@6bf2c1355ac4430a6fb77befd36fb95243fcaa3a # 0.1.12
+        uses: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action@0.1.2
         with:
           json-file: "./${{ matrix.json-file }}"

.gitea/workflows/prerelease.yaml

@@ -0,0 +1,22 @@
+name: Prerelease
+
+on:
+  workflow_dispatch:
+
+jobs:
+  prerelease:
+    name: Prerelease
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        with:
+          fetch-depth: 0
+      - name: Increment tag
+        id: tag
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@0.1.1
+        with:
+          token: ${{ secrets.GITEA_TOKEN }}
+          prerelease: true
+      - uses: ./.gitea/actions/release-git-tag
+        with:
+          tag: ${{ steps.tag.outputs.new-tag }}

action.json

@@ -1,44 +1,10 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["local>t.behrendt/renovate-configs:common", "helpers:pinGitHubActionDigests"],
+  "extends": ["helpers:pinGitHubActionDigests"],
   "packageRules": [
     {
       "matchManagers": ["github-actions"],
       "addLabels": ["deps", "action"]
-    },
-    {
-      "matchManagers": ["github-actions"],
-      "matchUpdateTypes": ["minor", "patch"],
-      "matchPackageNames": [
-        "https://gitea.t000-n.de/t.behrendt/actions/*",
-        "https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment",
-        "https://gitea.t000-n.de/t.behrendt/k_deploy_workflows",
-        "https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action",
-        
-        "actions/checkout",
-        "actions/cache",
-        "actions/cache/*",
-        "actions/setup-go",
-
-        "azure/setup-kubectl",
-        "azure/setup-helm",
-        "azure/k8s-set-context",
-        "azure/k8s-create-secret",
-        "azure/k8s-deploy",
-        "azure/k8s-lint",
-        
-        "helmfile/helmfile-action",
-
-        "docker/setup-buildx-action",
-        "docker/login-action",
-        "docker/build-push-action",
-
-        "oven-sh/setup-bun"
-      ],
-      "automerge": true,
-      "platformAutomerge": true,
-      "automergeType": "pr",
-      "addLabels": ["automerge"]
     }
   ]
 }

bun-npm.json

@@ -1,20 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["local>t.behrendt/renovate-configs:common"],
-  "packageRules": [
-    {
-      "description": "Group all minor and patch updates together",
-      "groupName": "all non-major dependencies",
-      "groupSlug": "all-minor-patch",
-      "matchUpdateTypes": ["minor", "patch"],
-      "matchManagers": ["npm", "bun"]
-    },
-    {
-      "description": "Group Bun releases",
-      "groupName": "bun version",
-      "groupSlug": "bun-version",
-      "matchDatasources": ["github-tags", "docker"],
-      "matchPackageNames": ["docker.io/oven/bun", "oven-sh/bun", "Bun"]
-    }
-  ]
-}

common.json

@@ -2,38 +2,5 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "dependencyDashboard": true,
   "semanticCommits": "enabled",
-  "extends": [
-    "config:recommended",
-    "docker:pinDigests",
-    "helpers:pinGitHubActionDigests",
-    ":configMigration",
-    ":pinDevDependencies",
-    "abandonments:recommended",
-    ":maintainLockFilesWeekly",
-    ":semanticCommitTypeAll(chore)"
-  ],
-  "packageRules": [
-    {
-      "description": "Don't update dependencies unless they are at least 7 days old (except for internal deps).",
-      "matchPackageNames": [
-        "!https://gitea.t000-n.de/t.behrendt/**"
-      ],
-      "minimumReleaseAge": "7 days",
-      "minimumReleaseAgeBehaviour": "timestamp-required",
-      "internalChecksFilter": "strict"
-    }
-  ],
-  "osvVulnerabilityAlerts": true,
-  "dependencyDashboardOSVVulnerabilitySummary": "all",
-  "vulnerabilityAlerts": {
-    "enabled": true,
-    "automerge": true,
-    "platformAutomerge": true,
-    "automergeType": "pr",
-    "addLabels": [
-      "automerge",
-      "security"
-    ],
-    "vulnerabilityFixStrategy": "lowest"
-  }
-}
+  "extends": ["config:best-practices", ":semanticCommitTypeAll(chore)"]
+}

docker-compose.json

@@ -1,6 +1,5 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["local>t.behrendt/renovate-configs:common"],
   "docker-compose": {
     "digest": {
       "enabled": true

helm.json

@@ -1,6 +1,5 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["local>t.behrendt/renovate-configs:common"],
   "helm-values": {
     "fileMatch": ["(^|/)values/.*\\.ya?ml$", "(^|/)values/.*\\.ya?ml\\.gotmpl$"]
   },

k8s.json

@@ -1,6 +1,5 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["local>t.behrendt/renovate-configs:common"],
   "kubernetes": {
     "enabled": true,
     "labels": ["deps", "k8s"]

renovate.json

@@ -1,6 +1,7 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
+    "local>t.behrendt/renovate-configs:common",
     "local>t.behrendt/renovate-configs:action"
   ]
 }