From 4ee3942ea08cd5891d186070688fdb440fc51f54 Mon Sep 17 00:00:00 2001 From: Remco Beckers Date: Wed, 21 Oct 2026 11:01:47 +0200 Subject: [PATCH 1/3] Pin Renovate configuration to v1.0.0 --- .github/workflows/auto-approve-bot-prs.yml | 2 +- .github/workflows/renovate.yml | 2 +- renovate.json | 8 ++++---- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/auto-approve-bot-prs.yml b/.github/workflows/auto-approve-bot-prs.yml index d9079aa4..026aa7dc 100644 --- a/.github/workflows/auto-approve-bot-prs.yml +++ b/.github/workflows/auto-approve-bot-prs.yml @@ -20,7 +20,7 @@ jobs: pull-requests: read steps: - name: Approve verified Renovate PRs - uses: StackVista/renovate-config/.github/actions/auto-approve-renovate@c308265fc9a7ee7aecaf1590383094214045049a # main + uses: StackVista/renovate-config/.github/actions/auto-approve-renovate@005e342f15c5481932542b5552b23cdd21e624a9 # v1.0.0 with: app-client-id: ${{ vars.RENOVATE_APPROVAL_GH_APP_CLIENT_ID }} app-private-key: ${{ secrets.RENOVATE_APPROVAL_GH_APP_PRIVATE_KEY }} diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index d7e2a3bb..4382f90c 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -10,6 +10,6 @@ permissions: jobs: renovate: - uses: StackVista/renovate-config/.github/workflows/renovate.yml@c308265fc9a7ee7aecaf1590383094214045049a # main + uses: StackVista/renovate-config/.github/workflows/renovate.yml@005e342f15c5481932542b5552b23cdd21e624a9 # v1.0.0 secrets: RENOVATE_GH_APP_PRIVATE_KEY: ${{ secrets.RENOVATE_GH_APP_PRIVATE_KEY }} diff --git a/renovate.json b/renovate.json index 3bf93aea..3fbaeda8 100644 --- a/renovate.json +++ b/renovate.json @@ -1,9 +1,9 @@ { "$schema": "https://docs.renovatebot.com/renovate-schema.json", "extends": [ - "github>StackVista/renovate-config#c308265fc9a7ee7aecaf1590383094214045049a", - "github>StackVista/renovate-config:go#c308265fc9a7ee7aecaf1590383094214045049a", - "github>StackVista/renovate-config:docker#c308265fc9a7ee7aecaf1590383094214045049a", - "github>StackVista/renovate-config:automerge#c308265fc9a7ee7aecaf1590383094214045049a" + "github>StackVista/renovate-config#005e342f15c5481932542b5552b23cdd21e624a9", + "github>StackVista/renovate-config:go#005e342f15c5481932542b5552b23cdd21e624a9", + "github>StackVista/renovate-config:docker#005e342f15c5481932542b5552b23cdd21e624a9", + "github>StackVista/renovate-config:automerge#005e342f15c5481932542b5552b23cdd21e624a9" ] } From b33565432afc878e7b820832a738931e574f546a Mon Sep 17 00:00:00 2001 From: Remco Beckers Date: Wed, 21 Oct 2026 13:42:15 +0200 Subject: [PATCH 2/3] Keep Renovate release pins updateable --- renovate.json | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) diff --git a/renovate.json b/renovate.json index 3fbaeda8..55872f0b 100644 --- a/renovate.json +++ b/renovate.json @@ -5,5 +5,40 @@ "github>StackVista/renovate-config:go#005e342f15c5481932542b5552b23cdd21e624a9", "github>StackVista/renovate-config:docker#005e342f15c5481932542b5552b23cdd21e624a9", "github>StackVista/renovate-config:automerge#005e342f15c5481932542b5552b23cdd21e624a9" + ], + "description": "Renovate release v1.0.0", + "customManagers": [ + { + "customType": "regex", + "description": "Track the release behind shared Renovate preset SHA pins.", + "managerFilePatterns": [ + "/(^|/)renovate\\.json$/" + ], + "matchStringsStrategy": "recursive", + "matchStrings": [ + "^[\\s\\S]*\"description\"\\s*:\\s*\"Renovate release (?v[0-9]+\\.[0-9]+\\.[0-9]+)\"[\\s\\S]*$", + "^[\\s\\S]*?(?:local|github)>StackVista/renovate-config(?:(?::|//)[^\"#]+)?#(?[a-f0-9]{40})[\\s\\S]*$" + ], + "depNameTemplate": "StackVista/renovate-config", + "datasourceTemplate": "github-tags", + "versioningTemplate": "semver", + "autoReplaceStringTemplate": "{{{replace '((?:local|github)>StackVista/renovate-config(?:(?::|//)[^\"#]+)?#)[a-f0-9]{40}' (replace 'SHA' newDigest '$1SHA') (replace '(\"description\"\\s*:\\s*\"Renovate release )v[0-9]+\\.[0-9]+\\.[0-9]+' (replace 'VERSION' newValue '$1VERSION') replaceString)}}}" + } + ], + "packageRules": [ + { + "matchManagers": [ + "custom.regex", + "github-actions" + ], + "matchPackageNames": [ + "StackVista/renovate-config" + ], + "groupName": "Renovate configuration", + "groupSlug": "renovate-config", + "separateMajorMinor": false, + "separateMinorPatch": false, + "automerge": false + } ] } From 0db963b79e8812e8efaea2e3abb7e80f85afef1f Mon Sep 17 00:00:00 2001 From: Remco Beckers Date: Wed, 21 Oct 2026 15:02:04 +0200 Subject: [PATCH 3/3] Use Renovate configuration v1.1.0 --- .github/workflows/auto-approve-bot-prs.yml | 2 +- .github/workflows/renovate.yml | 2 +- renovate.json | 29 ++++------------------ 3 files changed, 7 insertions(+), 26 deletions(-) diff --git a/.github/workflows/auto-approve-bot-prs.yml b/.github/workflows/auto-approve-bot-prs.yml index 026aa7dc..9f5552e6 100644 --- a/.github/workflows/auto-approve-bot-prs.yml +++ b/.github/workflows/auto-approve-bot-prs.yml @@ -20,7 +20,7 @@ jobs: pull-requests: read steps: - name: Approve verified Renovate PRs - uses: StackVista/renovate-config/.github/actions/auto-approve-renovate@005e342f15c5481932542b5552b23cdd21e624a9 # v1.0.0 + uses: StackVista/renovate-config/.github/actions/auto-approve-renovate@9e21a606e5995439dc37b1da98754da9983989a0 # v1.1.0 with: app-client-id: ${{ vars.RENOVATE_APPROVAL_GH_APP_CLIENT_ID }} app-private-key: ${{ secrets.RENOVATE_APPROVAL_GH_APP_PRIVATE_KEY }} diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index 4382f90c..43b43143 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -10,6 +10,6 @@ permissions: jobs: renovate: - uses: StackVista/renovate-config/.github/workflows/renovate.yml@005e342f15c5481932542b5552b23cdd21e624a9 # v1.0.0 + uses: StackVista/renovate-config/.github/workflows/renovate.yml@9e21a606e5995439dc37b1da98754da9983989a0 # v1.1.0 secrets: RENOVATE_GH_APP_PRIVATE_KEY: ${{ secrets.RENOVATE_GH_APP_PRIVATE_KEY }} diff --git a/renovate.json b/renovate.json index 55872f0b..8f763d40 100644 --- a/renovate.json +++ b/renovate.json @@ -1,34 +1,15 @@ { "$schema": "https://docs.renovatebot.com/renovate-schema.json", "extends": [ - "github>StackVista/renovate-config#005e342f15c5481932542b5552b23cdd21e624a9", - "github>StackVista/renovate-config:go#005e342f15c5481932542b5552b23cdd21e624a9", - "github>StackVista/renovate-config:docker#005e342f15c5481932542b5552b23cdd21e624a9", - "github>StackVista/renovate-config:automerge#005e342f15c5481932542b5552b23cdd21e624a9" - ], - "description": "Renovate release v1.0.0", - "customManagers": [ - { - "customType": "regex", - "description": "Track the release behind shared Renovate preset SHA pins.", - "managerFilePatterns": [ - "/(^|/)renovate\\.json$/" - ], - "matchStringsStrategy": "recursive", - "matchStrings": [ - "^[\\s\\S]*\"description\"\\s*:\\s*\"Renovate release (?v[0-9]+\\.[0-9]+\\.[0-9]+)\"[\\s\\S]*$", - "^[\\s\\S]*?(?:local|github)>StackVista/renovate-config(?:(?::|//)[^\"#]+)?#(?[a-f0-9]{40})[\\s\\S]*$" - ], - "depNameTemplate": "StackVista/renovate-config", - "datasourceTemplate": "github-tags", - "versioningTemplate": "semver", - "autoReplaceStringTemplate": "{{{replace '((?:local|github)>StackVista/renovate-config(?:(?::|//)[^\"#]+)?#)[a-f0-9]{40}' (replace 'SHA' newDigest '$1SHA') (replace '(\"description\"\\s*:\\s*\"Renovate release )v[0-9]+\\.[0-9]+\\.[0-9]+' (replace 'VERSION' newValue '$1VERSION') replaceString)}}}" - } + "github>StackVista/renovate-config#v1.1.0", + "github>StackVista/renovate-config:go#v1.1.0", + "github>StackVista/renovate-config:docker#v1.1.0", + "github>StackVista/renovate-config:automerge#v1.1.0" ], "packageRules": [ { "matchManagers": [ - "custom.regex", + "renovate-config", "github-actions" ], "matchPackageNames": [