feat(agent-runner): track agent-kit releases and bump baked pin to v3.3.0

.github/workflows/ci.yml

@@ -112,8 +112,8 @@ name: 'CI'
             agent_kit_actor=${{ steps.package-token.outputs.app-slug && format('{0}[bot]', steps.package-token.outputs.app-slug) || github.actor }}
           'build-args': |
             GIT_SHA=${{ github.sha }}
-            AGENT_KIT_RUNTIME_REF=ghcr.io/jorisjonkers-dev/agent-kit/runtime-home:v1.1.0
-            AGENT_KIT_VERSION=v1.1.0
+            AGENT_KIT_RUNTIME_REF=ghcr.io/jorisjonkers-dev/agent-kit/runtime-home:v3.3.0
+            AGENT_KIT_VERSION=v3.3.0
 
   'deploy-bundle':
     'name': 'Deploy Bundle'

.github/workflows/publish.yml

@@ -88,7 +88,7 @@ jobs:
             agent_kit_actor=${{ steps.package-token.outputs.app-slug && format('{0}[bot]', steps.package-token.outputs.app-slug) || github.actor }}
           build-args: |
             GIT_SHA=${{ github.sha }}
-            AGENT_KIT_VERSION=v1.1.0
+            AGENT_KIT_VERSION=v3.3.0
 
       - name: write-digest
         env:

renovate.json

@@ -1,4 +1,34 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["github>JorisJonkers-dev/renovate-config"]
+  "extends": ["github>JorisJonkers-dev/renovate-config"],
+  "customManagers": [
+    {
+      "customType": "regex",
+      "description": "Track the baked agent-kit runtime-home pin in the agent-runner image and its build workflows against agent-kit releases.",
+      "managerFilePatterns": [
+        "/(^|/)services/agent-runner/Dockerfile$/",
+        "/(^|/)\\.github/workflows/ci\\.ya?ml$/",
+        "/(^|/)\\.github/workflows/publish\\.ya?ml$/"
+      ],
+      "matchStrings": [
+        "runtime-home:(?<currentValue>v\\d+\\.\\d+\\.\\d+)",
+        "AGENT_KIT_VERSION=(?<currentValue>v\\d+\\.\\d+\\.\\d+)"
+      ],
+      "datasourceTemplate": "github-releases",
+      "depNameTemplate": "JorisJonkers-dev/agent-kit",
+      "depTypeTemplate": "agent-kit-runtime",
+      "versioningTemplate": "semver"
+    }
+  ],
+  "packageRules": [
+    {
+      "description": "Keep the baked agent-kit runtime pins (Dockerfile ARG + ci/publish build-args) in lockstep in a single PR.",
+      "matchManagers": ["custom.regex"],
+      "matchDepTypes": ["agent-kit-runtime"],
+      "groupName": "agent-kit runtime",
+      "semanticCommitType": "chore",
+      "semanticCommitScope": "agent-kit",
+      "addLabels": ["area: shared-libs"]
+    }
+  ]
 }

services/agent-runner/Dockerfile

@@ -42,10 +42,10 @@ RUN apk add --no-cache curl && \
 
 FROM debian:bookworm-slim
 ARG GIT_SHA=unknown
-ARG AGENT_KIT_RUNTIME_REF=ghcr.io/jorisjonkers-dev/agent-kit/runtime-home:v1.1.0
+ARG AGENT_KIT_RUNTIME_REF=ghcr.io/jorisjonkers-dev/agent-kit/runtime-home:v3.3.0
 ARG AGENT_KIT_RUNTIME_DIGEST
 ARG AGENT_KIT_RELEASE_BASE_URL=https://github.com/JorisJonkers-dev/agent-kit/releases/download
-ARG AGENT_KIT_VERSION=v1.1.0
+ARG AGENT_KIT_VERSION=v3.3.0
 ENV SERVICE_VERSION=${GIT_SHA}
 ENV AGENT_KIT_HOME_SOURCE=/opt/agent-kit/home
 ENV AGENT_KIT_SDD_SOURCE=/opt/agent-kit/sdd