From e09fbc045f9e4234ce3c2335e5a979632788af89 Mon Sep 17 00:00:00 2001 From: Remco Beckers Date: Wed, 21 Oct 2026 11:01:44 +0200 Subject: [PATCH 1/3] Pin Renovate configuration to v1.0.0 --- .github/workflows/auto-approve-bot-prs.yml | 2 +- renovate.json | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/auto-approve-bot-prs.yml b/.github/workflows/auto-approve-bot-prs.yml index 24a6395..026aa7d 100644 --- a/.github/workflows/auto-approve-bot-prs.yml +++ b/.github/workflows/auto-approve-bot-prs.yml @@ -20,7 +20,7 @@ jobs: pull-requests: read steps: - name: Approve verified Renovate PRs - uses: StackVista/renovate-config/.github/actions/auto-approve-renovate@45d01defd5070a9c05f0b3bf9b28995487bd8262 + uses: StackVista/renovate-config/.github/actions/auto-approve-renovate@005e342f15c5481932542b5552b23cdd21e624a9 # v1.0.0 with: app-client-id: ${{ vars.RENOVATE_APPROVAL_GH_APP_CLIENT_ID }} app-private-key: ${{ secrets.RENOVATE_APPROVAL_GH_APP_PRIVATE_KEY }} diff --git a/renovate.json b/renovate.json index b09043b..f9f7678 100644 --- a/renovate.json +++ b/renovate.json @@ -1,8 +1,8 @@ { "$schema": "https://docs.renovatebot.com/renovate-schema.json", "extends": [ - "github>StackVista/renovate-config", - "github>StackVista/renovate-config:go" + "github>StackVista/renovate-config#005e342f15c5481932542b5552b23cdd21e624a9", + "github>StackVista/renovate-config:go#005e342f15c5481932542b5552b23cdd21e624a9" ], "osvVulnerabilityAlerts": true, "minimumReleaseAge": "7 days", From 1170ec87bfe69ca3ea141f2d6bb1ed9e0cc35fc3 Mon Sep 17 00:00:00 2001 From: Remco Beckers Date: Wed, 21 Oct 2026 13:50:17 +0200 Subject: [PATCH 2/3] Keep Renovate release pins updateable --- renovate.json | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) diff --git a/renovate.json b/renovate.json index f9f7678..60e3759 100644 --- a/renovate.json +++ b/renovate.json @@ -220,6 +220,39 @@ "matchJsonata": ["isVulnerabilityAlert = true or $exists(vulnerabilityFixVersion)"], "minimumReleaseAge": null, "prPriority": 20 + }, + { + "matchManagers": [ + "custom.regex", + "github-actions" + ], + "matchPackageNames": [ + "StackVista/renovate-config" + ], + "groupName": "Renovate configuration", + "groupSlug": "renovate-config", + "separateMajorMinor": false, + "separateMinorPatch": false, + "automerge": false + } + ], + "description": "Renovate release v1.0.0", + "customManagers": [ + { + "customType": "regex", + "description": "Track the release behind shared Renovate preset SHA pins.", + "managerFilePatterns": [ + "/(^|/)renovate\\.json$/" + ], + "matchStringsStrategy": "recursive", + "matchStrings": [ + "^[\\s\\S]*\"description\"\\s*:\\s*\"Renovate release (?v[0-9]+\\.[0-9]+\\.[0-9]+)\"[\\s\\S]*$", + "^[\\s\\S]*?(?:local|github)>StackVista/renovate-config(?:(?::|//)[^\"#]+)?#(?[a-f0-9]{40})[\\s\\S]*$" + ], + "depNameTemplate": "StackVista/renovate-config", + "datasourceTemplate": "github-tags", + "versioningTemplate": "semver", + "autoReplaceStringTemplate": "{{{replace '((?:local|github)>StackVista/renovate-config(?:(?::|//)[^\"#]+)?#)[a-f0-9]{40}' (replace 'SHA' newDigest '$1SHA') (replace '(\"description\"\\s*:\\s*\"Renovate release )v[0-9]+\\.[0-9]+\\.[0-9]+' (replace 'VERSION' newValue '$1VERSION') replaceString)}}}" } ] } From 9270bf6c47ad0a2aa820abccbd590ad0c44f8393 Mon Sep 17 00:00:00 2001 From: Remco Beckers Date: Wed, 21 Oct 2026 15:01:56 +0200 Subject: [PATCH 3/3] Use Renovate configuration v1.1.0 --- .github/workflows/auto-approve-bot-prs.yml | 2 +- renovate.json | 25 +++------------------- 2 files changed, 4 insertions(+), 23 deletions(-) diff --git a/.github/workflows/auto-approve-bot-prs.yml b/.github/workflows/auto-approve-bot-prs.yml index 026aa7d..9f5552e 100644 --- a/.github/workflows/auto-approve-bot-prs.yml +++ b/.github/workflows/auto-approve-bot-prs.yml @@ -20,7 +20,7 @@ jobs: pull-requests: read steps: - name: Approve verified Renovate PRs - uses: StackVista/renovate-config/.github/actions/auto-approve-renovate@005e342f15c5481932542b5552b23cdd21e624a9 # v1.0.0 + uses: StackVista/renovate-config/.github/actions/auto-approve-renovate@9e21a606e5995439dc37b1da98754da9983989a0 # v1.1.0 with: app-client-id: ${{ vars.RENOVATE_APPROVAL_GH_APP_CLIENT_ID }} app-private-key: ${{ secrets.RENOVATE_APPROVAL_GH_APP_PRIVATE_KEY }} diff --git a/renovate.json b/renovate.json index 60e3759..1567465 100644 --- a/renovate.json +++ b/renovate.json @@ -1,8 +1,8 @@ { "$schema": "https://docs.renovatebot.com/renovate-schema.json", "extends": [ - "github>StackVista/renovate-config#005e342f15c5481932542b5552b23cdd21e624a9", - "github>StackVista/renovate-config:go#005e342f15c5481932542b5552b23cdd21e624a9" + "github>StackVista/renovate-config#v1.1.0", + "github>StackVista/renovate-config:go#v1.1.0" ], "osvVulnerabilityAlerts": true, "minimumReleaseAge": "7 days", @@ -223,7 +223,7 @@ }, { "matchManagers": [ - "custom.regex", + "renovate-config", "github-actions" ], "matchPackageNames": [ @@ -235,24 +235,5 @@ "separateMinorPatch": false, "automerge": false } - ], - "description": "Renovate release v1.0.0", - "customManagers": [ - { - "customType": "regex", - "description": "Track the release behind shared Renovate preset SHA pins.", - "managerFilePatterns": [ - "/(^|/)renovate\\.json$/" - ], - "matchStringsStrategy": "recursive", - "matchStrings": [ - "^[\\s\\S]*\"description\"\\s*:\\s*\"Renovate release (?v[0-9]+\\.[0-9]+\\.[0-9]+)\"[\\s\\S]*$", - "^[\\s\\S]*?(?:local|github)>StackVista/renovate-config(?:(?::|//)[^\"#]+)?#(?[a-f0-9]{40})[\\s\\S]*$" - ], - "depNameTemplate": "StackVista/renovate-config", - "datasourceTemplate": "github-tags", - "versioningTemplate": "semver", - "autoReplaceStringTemplate": "{{{replace '((?:local|github)>StackVista/renovate-config(?:(?::|//)[^\"#]+)?#)[a-f0-9]{40}' (replace 'SHA' newDigest '$1SHA') (replace '(\"description\"\\s*:\\s*\"Renovate release )v[0-9]+\\.[0-9]+\\.[0-9]+' (replace 'VERSION' newValue '$1VERSION') replaceString)}}}" - } ] }