ci: pin varios actions to a proper semver version (#39)

Reviewed-on: #39
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>

.gitea/workflows/cd.yaml

@@ -11,12 +11,12 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@9841c96e72d4fc1ecec620e91e213895341cce86 # 0.1.22
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@4c32e563bea346792d854585112bf6f06b312ce2 # 0.1.24
         with:
           token: ${{ secrets.GITEA_TOKEN }}
           prerelease: ${{ github.event_name == 'workflow_dispatch' }}

.gitea/workflows/ci.yaml

@@ -16,7 +16,7 @@ jobs:
           - "common.json"
           - "docker-compose.json"
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Validate "${{ matrix.json-file }}"
         uses: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action@3e6f6900956d410f67923617c65f38a7efb228c6 # 0.1.2
         with:

action.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["helpers:pinGitHubActionDigests"],
+  "extends": ["local>t.behrendt/renovate-configs:common", "helpers:pinGitHubActionDigests"],
   "packageRules": [
     {
       "matchManagers": ["github-actions"],

common.json

@@ -2,5 +2,18 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "dependencyDashboard": true,
   "semanticCommits": "enabled",
-  "extends": ["config:best-practices", ":semanticCommitTypeAll(chore)"]
+  "extends": ["config:best-practices", ":semanticCommitTypeAll(chore)"],
+  "packageRules": [
+    {
+      "description": "Don't update dependencies unless they are at least 7 days old",
+      "minimumReleaseAge": "7 days",
+      "minimumReleaseAgeBehaviour": "timestamp-required",
+      "internalChecksFilter": "strict"
+    },
+    {
+      "description": "Exempt local dependencies from the minimum release age",
+      "matchPackageNames": ["/^(https:\\/\\/)?gitea\\.t000-n\\.de/"],
+      "minimumReleaseAge": null
+    }
+  ]
 }

docker-compose.json

@@ -1,5 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["local>t.behrendt/renovate-configs:common"],
   "docker-compose": {
     "digest": {
       "enabled": true

helm.json

@@ -1,5 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["local>t.behrendt/renovate-configs:common"],
   "helm-values": {
     "fileMatch": ["(^|/)values/.*\\.ya?ml$", "(^|/)values/.*\\.ya?ml\\.gotmpl$"]
   },

k8s.json

@@ -1,5 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["local>t.behrendt/renovate-configs:common"],
   "kubernetes": {
     "enabled": true,
     "labels": ["deps", "k8s"]

renovate.json

@@ -1,7 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "local>t.behrendt/renovate-configs:common",
     "local>t.behrendt/renovate-configs:action"
   ]
 }