chore(deps): update https://gitea.t000-n.de/t.behrendt/actions action to v0.2.6

.gitea/workflows/cd.yaml

@@ -11,7 +11,7 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
       - name: Increment tag
@@ -20,6 +20,6 @@ jobs:
         with:
           token: ${{ secrets.GITEA_TOKEN }}
           prerelease: ${{ github.event_name == 'workflow_dispatch' }}
-      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@38c1bbd8bad3e7965744d03de85faa4a5b808d1b # 0.2.4
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@d658186b7db91d5a93dec78794c8585fa98af79c # 0.2.6
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/ci.yaml

@@ -17,7 +17,7 @@ jobs:
           - "docker-compose.json"
           - "bun-npm.json"
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - name: Validate "${{ matrix.json-file }}"
         uses: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action@6bf2c1355ac4430a6fb77befd36fb95243fcaa3a # 0.1.12
         with:

common.json

@@ -2,38 +2,20 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "dependencyDashboard": true,
   "semanticCommits": "enabled",
-  "extends": [
-    "config:recommended",
-    "docker:pinDigests",
-    "helpers:pinGitHubActionDigests",
-    ":configMigration",
-    ":pinDevDependencies",
-    "abandonments:recommended",
-    ":maintainLockFilesWeekly",
-    ":semanticCommitTypeAll(chore)"
-  ],
+  "extends": ["config:best-practices", ":semanticCommitTypeAll(chore)"],
   "packageRules": [
     {
-      "description": "Don't update dependencies unless they are at least 7 days old (except for internal deps).",
-      "matchPackageNames": [
-        "!https://gitea.t000-n.de/t.behrendt/**"
-      ],
+      "description": "Don't update dependencies unless they are at least 7 days old",
+      "matchPackageNames": ["*"],
       "minimumReleaseAge": "7 days",
       "minimumReleaseAgeBehaviour": "timestamp-required",
       "internalChecksFilter": "strict"
+    },
+    {
+      "description": "Exempt local dependencies from the minimum release age (last rule wins over earlier packageRules for the same options)",
+      "matchPackageNames": ["/^(https:\\/\\/)?gitea\\.t000-n\\.de/"],
+      "minimumReleaseAge": "0 days",
+      "internalChecksFilter": "none"
     }
-  ],
-  "osvVulnerabilityAlerts": true,
-  "dependencyDashboardOSVVulnerabilitySummary": "all",
-  "vulnerabilityAlerts": {
-    "enabled": true,
-    "automerge": true,
-    "platformAutomerge": true,
-    "automergeType": "pr",
-    "addLabels": [
-      "automerge",
-      "security"
-    ],
-    "vulnerabilityFixStrategy": "lowest"
-  }
-}
+  ]
+}