From 237ff3fd90a420998a5be8ee3ba31c569977f520 Mon Sep 17 00:00:00 2001 From: Lukas Hankeln Date: Sat, 18 Jul 2026 16:32:03 +0200 Subject: [PATCH] feat: pin digests and activate renovate Signed-off-by: Lukas Hankeln --- .releaserc | 20 ------------------- ...rkflow-amd64-without-semantic-release.yaml | 14 ++++++------- github-build-workflow-amd64.yaml | 16 +++++++-------- ...rkflow-arm64-without-semantic-release.yaml | 14 ++++++------- github-build-workflow-arm64.yaml | 16 +++++++-------- github-build-workflow-multi-arch.yaml | 16 +++++++-------- renovate.json | 4 ++++ 7 files changed, 42 insertions(+), 58 deletions(-) delete mode 100644 .releaserc create mode 100644 renovate.json diff --git a/.releaserc b/.releaserc deleted file mode 100644 index a0ba903..0000000 --- a/.releaserc +++ /dev/null @@ -1,20 +0,0 @@ -{ - "branches": [ - "main", - { - "name": "develop", - "prerelease": true - } - ], - "plugins": [ - "@semantic-release/commit-analyzer", - [ - "@semantic-release/github", - { - "successComment": false, - "failTitle": false - } - ], - "@semantic-release/release-notes-generator" - ] -} diff --git a/github-build-workflow-amd64-without-semantic-release.yaml b/github-build-workflow-amd64-without-semantic-release.yaml index a067a6e..5d99156 100644 --- a/github-build-workflow-amd64-without-semantic-release.yaml +++ b/github-build-workflow-amd64-without-semantic-release.yaml @@ -18,11 +18,11 @@ jobs: packages: write steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 20 @@ -39,21 +39,21 @@ jobs: - id: containerRegistryLogin name: Login to Container Registry - uses: docker/login-action@v3 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: registry: ${{ vars.MO_REGISTRY_AUTH_URL }} username: ${{ secrets.MO_REGISTRY_USER }} password: ${{ secrets.MO_REGISTRY_PAT }} - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Build and push amd64 image id: buildAndPushImage - uses: docker/build-push-action@v5 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: ${{ vars.MO_DOCKERCONTEXT }} file: ${{ vars.MO_DOCKERFILE }} @@ -68,7 +68,7 @@ jobs: - id: releaseWithMogenius name: Release with mogenius - uses: mogenius/mogenius-release-action@v1 + uses: mogenius/mogenius-release-action@8be39c76c0206062eb9f26d8fb84b88a5f2dc61b # v1 with: dev: true image: ${{ vars.MO_REGISTRY_URL }}/${{ vars.MO_IMAGE_NAME }}:${{ env.VERSION }} diff --git a/github-build-workflow-amd64.yaml b/github-build-workflow-amd64.yaml index 8e571b5..a754a10 100644 --- a/github-build-workflow-amd64.yaml +++ b/github-build-workflow-amd64.yaml @@ -18,16 +18,16 @@ jobs: packages: write steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 20 - name: Semantic Release - uses: cycjimmy/semantic-release-action@v4 + uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} @@ -44,21 +44,21 @@ jobs: - id: containerRegistryLogin name: Login to Container Registry - uses: docker/login-action@v3 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: registry: ${{ vars.MO_REGISTRY_AUTH_URL }} username: ${{ secrets.MO_REGISTRY_USER }} password: ${{ secrets.MO_REGISTRY_PAT }} - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Build and push amd64 image id: buildAndPushImage - uses: docker/build-push-action@v5 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: ${{ vars.MO_DOCKERCONTEXT }} file: ${{ vars.MO_DOCKERFILE }} @@ -73,7 +73,7 @@ jobs: - id: releaseWithMogenius name: Release with mogenius - uses: mogenius/mogenius-release-action@v1 + uses: mogenius/mogenius-release-action@8be39c76c0206062eb9f26d8fb84b88a5f2dc61b # v1 with: dev: true image: ${{ vars.MO_REGISTRY_URL }}/${{ vars.MO_IMAGE_NAME }}:${{ env.VERSION }} diff --git a/github-build-workflow-arm64-without-semantic-release.yaml b/github-build-workflow-arm64-without-semantic-release.yaml index 61cd4d5..ab0231a 100644 --- a/github-build-workflow-arm64-without-semantic-release.yaml +++ b/github-build-workflow-arm64-without-semantic-release.yaml @@ -18,11 +18,11 @@ jobs: packages: write steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 20 @@ -39,21 +39,21 @@ jobs: - id: containerRegistryLogin name: Login to Container Registry - uses: docker/login-action@v3 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: registry: ${{ vars.MO_REGISTRY_AUTH_URL }} username: ${{ secrets.MO_REGISTRY_USER }} password: ${{ secrets.MO_REGISTRY_PAT }} - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Build and push arm64 image id: buildAndPushImage - uses: docker/build-push-action@v5 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: ${{ vars.MO_DOCKERCONTEXT }} file: ${{ vars.MO_DOCKERFILE }} @@ -68,7 +68,7 @@ jobs: - id: releaseWithMogenius name: Release with mogenius - uses: mogenius/mogenius-release-action@v1 + uses: mogenius/mogenius-release-action@8be39c76c0206062eb9f26d8fb84b88a5f2dc61b # v1 with: dev: true image: ${{ vars.MO_REGISTRY_URL }}/${{ vars.MO_IMAGE_NAME }}:${{ env.VERSION }} diff --git a/github-build-workflow-arm64.yaml b/github-build-workflow-arm64.yaml index 24e537c..0e5ad18 100644 --- a/github-build-workflow-arm64.yaml +++ b/github-build-workflow-arm64.yaml @@ -18,16 +18,16 @@ jobs: packages: write steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 20 - name: Semantic Release - uses: cycjimmy/semantic-release-action@v4 + uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} @@ -44,21 +44,21 @@ jobs: - id: containerRegistryLogin name: Login to Container Registry - uses: docker/login-action@v3 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: registry: ${{ vars.MO_REGISTRY_AUTH_URL }} username: ${{ secrets.MO_REGISTRY_USER }} password: ${{ secrets.MO_REGISTRY_PAT }} - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Build and push arm64 image id: buildAndPushImage - uses: docker/build-push-action@v5 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: ${{ vars.MO_DOCKERCONTEXT }} file: ${{ vars.MO_DOCKERFILE }} @@ -73,7 +73,7 @@ jobs: - id: releaseWithMogenius name: Release with mogenius - uses: mogenius/mogenius-release-action@v1 + uses: mogenius/mogenius-release-action@8be39c76c0206062eb9f26d8fb84b88a5f2dc61b # v1 with: dev: true image: ${{ vars.MO_REGISTRY_URL }}/${{ vars.MO_IMAGE_NAME }}:${{ env.VERSION }} diff --git a/github-build-workflow-multi-arch.yaml b/github-build-workflow-multi-arch.yaml index 5e73188..1365d17 100644 --- a/github-build-workflow-multi-arch.yaml +++ b/github-build-workflow-multi-arch.yaml @@ -18,16 +18,16 @@ jobs: packages: write steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 20 - name: Semantic Release - uses: cycjimmy/semantic-release-action@v4 + uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} @@ -44,21 +44,21 @@ jobs: - id: containerRegistryLogin name: Login to Container Registry - uses: docker/login-action@v3 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: registry: ${{ vars.MO_REGISTRY_AUTH_URL }} username: ${{ secrets.MO_REGISTRY_USER }} password: ${{ secrets.MO_REGISTRY_PAT }} - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Build and push multi-arch image id: buildAndPushImage - uses: docker/build-push-action@v5 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: ${{ vars.MO_DOCKERCONTEXT }} file: ${{ vars.MO_DOCKERFILE }} @@ -73,7 +73,7 @@ jobs: - id: releaseWithMogenius name: Release with mogenius - uses: mogenius/mogenius-release-action@v1 + uses: mogenius/mogenius-release-action@8be39c76c0206062eb9f26d8fb84b88a5f2dc61b # v1 with: dev: true image: ${{ vars.MO_REGISTRY_URL }}/${{ vars.MO_IMAGE_NAME }}:${{ env.VERSION }} diff --git a/renovate.json b/renovate.json new file mode 100644 index 0000000..22a9943 --- /dev/null +++ b/renovate.json @@ -0,0 +1,4 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": ["config:recommended"] +}