Merge pull request 'ci(tag): déclenche Renovate sur tf-depl-kubernetes dès que l'image de release est poussée (mcp-maildir)' (#62 ) from ci/renovate-dispatch-on-release into main

Reviewed-on: #62
ci(tag): dispatch Renovate on tf-depl-kubernetes once the release image is pushed
2026-10-18 14:42:34 -04:00 · 2026-10-18 13:22:32 -04:00
1 changed files with 20 additions and 1 deletions
@@ -94,4 +94,23 @@ jobs:
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
-          pull: true
+          pull: true
  trigger-renovate:
    # The deployment repo perso_private/tf-depl-kubernetes pins this image; its
    # Renovate instance only scans hourly, so this dispatch opens the image bump
    # PR within minutes of the release instead of up to an hour later.
    needs: [build-push]
    runs-on: ubuntu-latest
    steps:
      - name: Trigger Renovate on perso_private/tf-depl-kubernetes
        # needs: build-push — Renovate reads Docker Hub, so a scan started before
        # the push lands would only see the previous release.
        # RENOVATE_TOKEN is the org-level secret of this organisation.
        run: |
          curl -sS -f -X POST \
            -u "renovate:${{ secrets.RENOVATE_TOKEN }}" \
            -H "Content-Type: application/json" \
            -d '{{"ref":"main"}}' \
            "https://scm.cabillot.eu/api/v1/repos/perso_private/tf-depl-kubernetes/actions/workflows/renovate.yaml/dispatches"
          echo "Renovate dispatched on perso_private/tf-depl-kubernetes"
Author	SHA1	Message	Date
jcabillot	2e247141fc	Merge pull request 'ci(tag): déclenche Renovate sur tf-depl-kubernetes dès que l'image de release est poussée (mcp-maildir)' (#62 ) from ci/renovate-dispatch-on-release into main Main Release / hadolint (push) Successful in 37s Details Docker Build and Push / test (push) Successful in 4m47s Details Main Release / test (push) Successful in 4m57s Details Docker Build and Push / integration-test (push) Successful in 5m53s Details Renovate / renovate (push) Successful in 1m32s Details Main Release / integration-test (push) Successful in 7m25s Details Docker Build and Push / build (push) Successful in 6m22s Details Main Release / build (push) Successful in 6m13s Details Main Release / tag (push) Successful in 20s Details Tag Release / hadolint (push) Successful in 37s Details Tag Release / test (push) Successful in 3m21s Details Tag Release / integration-test (push) Successful in 4m25s Details Tag Release / build-push (push) Successful in 4m11s Details Tag Release / trigger-renovate (push) Failing after 20s Details PR Checks / hadolint (pull_request) Successful in 12s Details Docker Build and Push / test (pull_request) Successful in 1m44s Details PR Checks / build-test (pull_request) Successful in 15s Details Docker Build and Push / integration-test (pull_request) Successful in 2m18s Details PR Checks / pytest (pull_request) Successful in 1m47s Details Docker Build and Push / build (pull_request) Successful in 2m35s Details Reviewed-on: #62	2026-10-18 14:42:34 -04:00
opencodecabilloteu	ef480dfd97	ci(tag): dispatch Renovate on tf-depl-kubernetes once the release image is pushed PR Checks / hadolint (pull_request) Successful in 28s Details PR Checks / pytest (pull_request) Successful in 7m14s Details PR Checks / build-test (pull_request) Successful in 5m15s Details Docker Build and Push / test (pull_request) Successful in 3m40s Details Docker Build and Push / integration-test (pull_request) Successful in 3m54s Details Docker Build and Push / build (pull_request) Successful in 3m4s Details A release only reached perso_private/tf-depl-kubernetes on the next hourly Renovate scan, so the image bump PR could lag up to an hour behind the tag. After the image push completes, dispatch that repo's Renovate workflow through the Gitea API (workflow_dispatch is already enabled there). It authenticates with the RENOVATE_TOKEN org secret of this organisation — the same token the Renovate instance itself uses, no extra credential. The job fails loudly so a rotated token shows up instead of the trigger silently going missing.	2026-10-18 13:22:32 -04:00