.drone.yml

@@ -11,12 +11,12 @@ platform:
 
 steps:
 - name: clone
-  image: git.cryptic.systems/volker.raschek/git:1.4.0
+  image: git.cryptic.systems/volker.raschek/git:1.3.1
 
 - name: markdown lint
   commands:
   - markdownlint *.md
-  image: git.cryptic.systems/volker.raschek/markdownlint:0.44.0
+  image: git.cryptic.systems/volker.raschek/markdownlint:0.42.0
   resources:
     limits:
       cpu: 150
@@ -66,10 +66,10 @@ platform:
 
 steps:
 - name: clone
-  image: git.cryptic.systems/volker.raschek/git:1.4.0
+  image: git.cryptic.systems/volker.raschek/git:1.3.1
 
 - name: build
-  image: docker.io/plugins/docker:20.18.6
+  image: docker.io/plugins/docker:20.18.4
   settings:
     auto_tag: false
     dockerfile: Dockerfile
@@ -132,10 +132,10 @@ platform:
 
 steps:
 - name: clone
-  image: git.cryptic.systems/volker.raschek/git:1.4.0
+  image: git.cryptic.systems/volker.raschek/git:1.3.1
 
 - name: build
-  image: docker.io/plugins/docker:20.18.6
+  image: docker.io/plugins/docker:20.18.4
   settings:
     auto_tag: false
     dockerfile: Dockerfile
@@ -198,10 +198,10 @@ platform:
 
 steps:
 - name: clone
-  image: git.cryptic.systems/volker.raschek/git:1.4.0
+  image: git.cryptic.systems/volker.raschek/git:1.3.1
 
 - name: build
-  image: docker.io/plugins/docker:20.18.6
+  image: docker.io/plugins/docker:20.18.4
   settings:
     auto_tag: false
     dockerfile: Dockerfile
@@ -262,10 +262,10 @@ platform:
 
 steps:
 - name: clone
-  image: git.cryptic.systems/volker.raschek/git:1.4.0
+  image: git.cryptic.systems/volker.raschek/git:1.3.1
 
 - name: build
-  image: docker.io/plugins/docker:20.18.6
+  image: docker.io/plugins/docker:20.18.4
   settings:
     auto_tag: false
     dockerfile: Dockerfile
@@ -328,7 +328,7 @@ node_selector:
 
 steps:
 - name: clone
-  image: git.cryptic.systems/volker.raschek/git:1.4.0
+  image: git.cryptic.systems/volker.raschek/git:1.3.1
 
 - name: build-manifest
   image: docker.io/plugins/manifest:1.4.0
@@ -385,7 +385,7 @@ depends_on:
 
 steps:
 - name: clone
-  image: git.cryptic.systems/volker.raschek/git:1.4.0
+  image: git.cryptic.systems/volker.raschek/git:1.3.1
 
 - name: latest-sync
   commands:
@@ -399,7 +399,7 @@ steps:
       from_secret: container_image_registry_user
     DEST_CRED_PASSWORD:
       from_secret: container_image_registry_password
-  image: quay.io/skopeo/stable:v1.18.0
+  image: quay.io/skopeo/stable:v1.17.0
 
 - name: email-notification
   environment:
@@ -446,10 +446,10 @@ platform:
 
 steps:
 - name: clone
-  image: git.cryptic.systems/volker.raschek/git:1.4.0
+  image: git.cryptic.systems/volker.raschek/git:1.3.1
 
 - name: build
-  image: docker.io/plugins/docker:20.18.6
+  image: docker.io/plugins/docker:20.18.4
   settings:
     auto_tag: true
     auto_tag_suffix: amd64
@@ -506,10 +506,10 @@ platform:
 
 steps:
 - name: clone
-  image: git.cryptic.systems/volker.raschek/git:1.4.0
+  image: git.cryptic.systems/volker.raschek/git:1.3.1
 
 - name: build
-  image: docker.io/plugins/docker:20.18.6
+  image: docker.io/plugins/docker:20.18.4
   settings:
     auto_tag: true
     auto_tag_suffix: arm64-v8
@@ -571,7 +571,7 @@ node_selector:
 
 steps:
 - name: clone
-  image: git.cryptic.systems/volker.raschek/git:1.4.0
+  image: git.cryptic.systems/volker.raschek/git:1.3.1
 
 - name: build-manifest
   image: docker.io/plugins/manifest:1.4.0
@@ -625,7 +625,7 @@ depends_on:
 
 steps:
 - name: clone
-  image: git.cryptic.systems/volker.raschek/git:1.4.0
+  image: git.cryptic.systems/volker.raschek/git:1.3.1
 
 - name: tagged-sync
   commands:
@@ -639,7 +639,7 @@ steps:
       from_secret: container_image_registry_user
     DEST_CRED_PASSWORD:
       from_secret: container_image_registry_password
-  image: quay.io/skopeo/stable:v1.18.0
+  image: quay.io/skopeo/stable:v1.17.0
 
 - name: email-notification
   environment:

Dockerfile

@@ -1,4 +1,4 @@
-FROM docker.io/library/alpine:3.21.3
+FROM docker.io/library/alpine:3.20.3
 RUN apk add --no-cache \
       bash \
       ca-certificates \

Makefile

@@ -5,8 +5,8 @@ CONTAINER_RUNTIME?=$(shell which podman)
 
 # GIT_IMAGE_REGISTRY_NAME
 # Defines the name of the new container to be built using several variables.
-GIT_IMAGE_REGISTRY_NAME?=git.cryptic.systems
+GIT_IMAGE_REGISTRY_NAME:=git.cryptic.systems
-GIT_IMAGE_REGISTRY_USER?=volker.raschek
+GIT_IMAGE_REGISTRY_USER:=volker.raschek
 
 GIT_IMAGE_NAMESPACE?=${GIT_IMAGE_REGISTRY_USER}
 GIT_IMAGE_NAME:=git

renovate.json

@@ -1,9 +1,33 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
+  "assignees": [ "volker.raschek" ],
-    "local>volker.raschek/renovate-config:default#master",
+  "labels": [ "renovate" ],
-    "local>volker.raschek/renovate-config:container#master",
+  "packageRules": [
-    "local>volker.raschek/renovate-config:actions#master",
+    {
-    "local>volker.raschek/renovate-config:regexp#master"
+      "addLabels": [ "renovate/droneci", "renovate/automerge" ],
+      "automerge": true,
+      "matchManagers": "droneci",
+      "matchUpdateTypes": [ "minor", "patch"]
+    },
+    {
+      "description": "Automatically update patch version of used container images in docker files",
+      "addLabels": [ "renovate/container-image", "renovate/automerge" ],
+      "automerge": true,
+      "matchManagers": [ "dockerfile" ],
+      "matchUpdateTypes": [ "patch" ]
+    }
+  ],
+  "rebaseLabel": "renovate/rebase",
+  "rebaseWhen": "behind-base-branch",
+  "regexManagers": [
+    {
+      "description": "Update version",
+      "fileMatch": [
+        "^Makefile$"
+      ],
+      "matchStrings": [
+        "GOSEC_VERSION\\?=(?<currentValue>.*) # renovate: datasource=(?<datasource>.*) depName=(?<depName>.*)( lookupName=(?<lookupName>.*))?( versioning=(?<versioning>.*))?"
+      ]
+    }
   ]
 }