feat: chage minimumReleaseAgeBehaviour to strict (#36)

Reviewed-on: #36
Co-authored-by: t.behrendt <t.behrendt@t00n.de>
Co-committed-by: t.behrendt <t.behrendt@t00n.de>

.gitea/workflows/cd.yaml

@@ -16,10 +16,10 @@ jobs:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@0.1.1
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@4c32e563bea346792d854585112bf6f06b312ce2 # 0.1.24
         with:
           token: ${{ secrets.GITEA_TOKEN }}
           prerelease: ${{ github.event_name == 'workflow_dispatch' }}
-      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@0.0.3
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@8a04fa92474f770e525b1e6dd420b471da15c222 # 0.1.0
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/ci.yaml

@@ -18,6 +18,6 @@ jobs:
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
       - name: Validate "${{ matrix.json-file }}"
-        uses: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action@0.1.2
+        uses: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action@3e6f6900956d410f67923617c65f38a7efb228c6 # 0.1.2
         with:
           json-file: "./${{ matrix.json-file }}"

action.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["helpers:pinGitHubActionDigests"],
+  "extends": ["local>t.behrendt/renovate-configs:common", "helpers:pinGitHubActionDigests"],
   "packageRules": [
     {
       "matchManagers": ["github-actions"],

common.json

@@ -2,5 +2,19 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "dependencyDashboard": true,
   "semanticCommits": "enabled",
-  "extends": ["config:best-practices", ":semanticCommitTypeAll(chore)"]
+  "extends": ["config:best-practices", ":semanticCommitTypeAll(chore)"],
+  "packageRules": [
+    {
+      "description": "Don't update dependencies unless they are at least 7 days old",
+      "minimumReleaseAge": "7 days",
+      "minimumReleaseAgeBehaviour": "timestamp-required",
+      "internalChecksFilter": "strict"
+    },
+    {
+      "description": "Exempt local dependencies from the minimum release age",
+      "matchManagers": ["docker-compose", "helm-values", "github-actions", "kubernetes", "dockerfile"],
+      "matchPackagePatterns": ["^(https:\\/\\/)?gitea\\.t000-n\\.de\/"],
+      "minimumReleaseAge": null
+    }
+  ]
 }

docker-compose.json

@@ -1,5 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["local>t.behrendt/renovate-configs:common"],
   "docker-compose": {
     "digest": {
       "enabled": true

helm.json

@@ -1,5 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["local>t.behrendt/renovate-configs:common"],
   "helm-values": {
     "fileMatch": ["(^|/)values/.*\\.ya?ml$", "(^|/)values/.*\\.ya?ml\\.gotmpl$"]
   },

k8s.json

@@ -1,5 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["local>t.behrendt/renovate-configs:common"],
   "kubernetes": {
     "enabled": true,
     "labels": ["deps", "k8s"]

renovate.json

@@ -1,7 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "local>t.behrendt/renovate-configs:common",
     "local>t.behrendt/renovate-configs:action"
   ]
 }