From f30f058cb8daaed985a7f8e65a5f576613d1ffa7 Mon Sep 17 00:00:00 2001
From: JorisJonkers Agent <agents@jorisjonkers.dev>
Date: Mon, 13 Jul 2026 10:04:06 +0000
Subject: [PATCH] chore(agent-kit): propagate kit releases into the
 agent-runner image

Bump the baked agent-kit runtime pin from v1.1.0 to v3.3.0 across the
agent-runner Dockerfile and the ci/publish build-args, and add a Renovate
regex customManager that tracks these pins against agent-kit GitHub
releases so a kit release opens a single grouped bump PR.
---
 .github/workflows/ci.yml         |  4 ++--
 .github/workflows/publish.yml    |  2 +-
 renovate.json                    | 32 +++++++++++++++++++++++++++++++-
 services/agent-runner/Dockerfile |  4 ++--
 4 files changed, 36 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index dd99464..12d32c1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -112,8 +112,8 @@ name: 'CI'
             agent_kit_actor=${{ steps.package-token.outputs.app-slug && format('{0}[bot]', steps.package-token.outputs.app-slug) || github.actor }}
           'build-args': |
             GIT_SHA=${{ github.sha }}
-            AGENT_KIT_RUNTIME_REF=ghcr.io/jorisjonkers-dev/agent-kit/runtime-home:v1.1.0
-            AGENT_KIT_VERSION=v1.1.0
+            AGENT_KIT_RUNTIME_REF=ghcr.io/jorisjonkers-dev/agent-kit/runtime-home:v3.3.0
+            AGENT_KIT_VERSION=v3.3.0
 
   'deploy-bundle':
     'name': 'Deploy Bundle'
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 2cf9159..726ad15 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -88,7 +88,7 @@ jobs:
             agent_kit_actor=${{ steps.package-token.outputs.app-slug && format('{0}[bot]', steps.package-token.outputs.app-slug) || github.actor }}
           build-args: |
             GIT_SHA=${{ github.sha }}
-            AGENT_KIT_VERSION=v1.1.0
+            AGENT_KIT_VERSION=v3.3.0
 
       - name: write-digest
         env:
diff --git a/renovate.json b/renovate.json
index f70c126..e3cf433 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,4 +1,34 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["github>JorisJonkers-dev/renovate-config"]
+  "extends": ["github>JorisJonkers-dev/renovate-config"],
+  "customManagers": [
+    {
+      "customType": "regex",
+      "description": "Track the baked agent-kit runtime-home pin in the agent-runner image and its build workflows against agent-kit releases.",
+      "managerFilePatterns": [
+        "/(^|/)services/agent-runner/Dockerfile$/",
+        "/(^|/)\\.github/workflows/ci\\.ya?ml$/",
+        "/(^|/)\\.github/workflows/publish\\.ya?ml$/"
+      ],
+      "matchStrings": [
+        "runtime-home:(?<currentValue>v\\d+\\.\\d+\\.\\d+)",
+        "AGENT_KIT_VERSION=(?<currentValue>v\\d+\\.\\d+\\.\\d+)"
+      ],
+      "datasourceTemplate": "github-releases",
+      "depNameTemplate": "JorisJonkers-dev/agent-kit",
+      "depTypeTemplate": "agent-kit-runtime",
+      "versioningTemplate": "semver"
+    }
+  ],
+  "packageRules": [
+    {
+      "description": "Keep the baked agent-kit runtime pins (Dockerfile ARG + ci/publish build-args) in lockstep in a single PR.",
+      "matchManagers": ["custom.regex"],
+      "matchDepTypes": ["agent-kit-runtime"],
+      "groupName": "agent-kit runtime",
+      "semanticCommitType": "chore",
+      "semanticCommitScope": "agent-kit",
+      "addLabels": ["area: shared-libs"]
+    }
+  ]
 }
diff --git a/services/agent-runner/Dockerfile b/services/agent-runner/Dockerfile
index 835aaed..c915951 100644
--- a/services/agent-runner/Dockerfile
+++ b/services/agent-runner/Dockerfile
@@ -42,10 +42,10 @@ RUN apk add --no-cache curl && \
 
 FROM debian:bookworm-slim
 ARG GIT_SHA=unknown
-ARG AGENT_KIT_RUNTIME_REF=ghcr.io/jorisjonkers-dev/agent-kit/runtime-home:v1.1.0
+ARG AGENT_KIT_RUNTIME_REF=ghcr.io/jorisjonkers-dev/agent-kit/runtime-home:v3.3.0
 ARG AGENT_KIT_RUNTIME_DIGEST
 ARG AGENT_KIT_RELEASE_BASE_URL=https://github.com/JorisJonkers-dev/agent-kit/releases/download
-ARG AGENT_KIT_VERSION=v1.1.0
+ARG AGENT_KIT_VERSION=v3.3.0
 ENV SERVICE_VERSION=${GIT_SHA}
 ENV AGENT_KIT_HOME_SOURCE=/opt/agent-kit/home
 ENV AGENT_KIT_SDD_SOURCE=/opt/agent-kit/sdd