chore(deps): update docker.io/library/python docker tag to v3.15

Merge pull request 'ci(tag): release Gitea (commit list) avant le dispatch Renovate' (#66 ) from chore/release-notes into main
Reviewed-on: #66
2026-10-19 17:39:03 +00:00 · 2026-10-19 13:37:46 -04:00 · 2026-10-19 13:09:29 -04:00 · 2026-10-19 11:43:52 -04:00 · 2026-10-18 22:14:36 -04:00 · 2026-10-18 14:42:34 -04:00
1 changed files with 30 additions and 0 deletions
@@ -95,3 +95,33 @@ jobs:
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          pull: true
  release:
    # Publishes the Gitea release for this tag (body = commits since the previous
    # tag). Renovate copies that body into the bump PR in
    # perso_private/tf-depl-kubernetes under "Release Notes"; without a release
    # that section stays empty (bare "Compare Source" link).
    needs: [build-push]
    uses: perso/gitea-pipelines/.gitea/workflows/gitea-release.yaml@main
    with:
      image: jcabillot/mcp-maildir
    secrets: inherit
  trigger-renovate:
    # The deployment repo perso_private/tf-depl-kubernetes pins this image; its
    # Renovate instance only scans hourly, so this dispatch opens the image bump
    # PR within minutes of the release instead of up to an hour later.
    needs: [build-push, release]
    runs-on: ubuntu-latest
    steps:
      - name: Trigger Renovate on perso_private/tf-depl-kubernetes
        # needs: build-push — Renovate reads Docker Hub, so a scan started before
        # the push lands would only see the previous release.
        # RENOVATE_TOKEN is the org-level secret of this organisation.
        run: |
          curl -sS -f -X POST \
            -u "renovate:${{ secrets.RENOVATE_TOKEN }}" \
            -H "Content-Type: application/json" \
            -d '{"ref":"main"}' \
            "https://scm.cabillot.eu/api/v1/repos/perso_private/tf-depl-kubernetes/actions/workflows/renovate.yaml/dispatches"
          echo "Renovate dispatched on perso_private/tf-depl-kubernetes"
Author	SHA1	Message	Date
renovate	a33dc82720	chore(deps): update docker.io/library/python docker tag to v3.15 renovate/stability-days Updates have met minimum release age requirement Details Docker Build and Push / test (pull_request) Successful in 1m34s Details PR Checks / hadolint (pull_request) Successful in 9s Details Docker Build and Push / integration-test (pull_request) Successful in 1m44s Details PR Checks / build-test (pull_request) Failing after 37s Details PR Checks / pytest (pull_request) Successful in 1m38s Details Docker Build and Push / build (pull_request) Failing after 1m3s Details	2026-10-19 17:39:03 +00:00
jcabillot	ae80f0bca7	Merge pull request 'ci(tag): release Gitea (commit list) avant le dispatch Renovate' (#66 ) from chore/release-notes into main Main Release / hadolint (push) Successful in 8s Details Renovate / renovate (push) Successful in 1m8s Details Docker Build and Push / test (push) Successful in 1m32s Details Docker Build and Push / integration-test (push) Successful in 1m41s Details Main Release / test (push) Successful in 2m6s Details Main Release / integration-test (push) Successful in 2m9s Details Main Release / build (push) Successful in 20s Details Main Release / tag (push) Successful in 21s Details Docker Build and Push / build (push) Successful in 2m38s Details Tag Release / hadolint (push) Successful in 18s Details Tag Release / test (push) Successful in 2m11s Details Tag Release / integration-test (push) Successful in 2m23s Details Tag Release / build-push (push) Successful in 2m25s Details Gitea Release / release (push) Successful in 7s Details Tag Release / release (push) Successful in 7s Details Tag Release / trigger-renovate (push) Successful in 3s Details Reviewed-on: #66	2026-10-19 13:37:46 -04:00
opencodecabilloteu	0fc681bf56	ci(tag): release Gitea (commit list) avant le dispatch Renovate PR Checks / hadolint (pull_request) Successful in 10s Details Docker Build and Push / test (pull_request) Successful in 1m41s Details Docker Build and Push / integration-test (pull_request) Successful in 1m49s Details PR Checks / build-test (pull_request) Successful in 17s Details PR Checks / pytest (pull_request) Successful in 1m39s Details Docker Build and Push / build (pull_request) Successful in 1m10s Details	2026-10-19 13:09:29 -04:00
jcabillot	b670538c7f	Merge pull request 'fix(ci): corps JSON valide dans le dispatch Renovate (accolades doublées → 422)' (#64 ) from fix/renovate-dispatch-json into main Main Release / hadolint (push) Successful in 8s Details Docker Build and Push / test (push) Successful in 1m54s Details Docker Build and Push / integration-test (push) Successful in 1m56s Details Main Release / test (push) Successful in 1m51s Details Renovate / renovate (push) Successful in 1m8s Details Main Release / integration-test (push) Successful in 1m54s Details Main Release / build (push) Successful in 16s Details Docker Build and Push / build (push) Successful in 3m5s Details Main Release / tag (push) Successful in 16s Details Tag Release / hadolint (push) Successful in 14s Details Tag Release / test (push) Successful in 1m40s Details Tag Release / integration-test (push) Successful in 1m53s Details Tag Release / build-push (push) Successful in 3m22s Details Tag Release / trigger-renovate (push) Successful in 6s Details Reviewed-on: #64	2026-10-19 11:43:52 -04:00
opencodecabilloteu	c4a3cb742e	fix(ci): corps JSON valide pour le dispatch Renovate PR Checks / hadolint (pull_request) Successful in 11s Details Docker Build and Push / test (pull_request) Successful in 1m57s Details PR Checks / build-test (pull_request) Successful in 17s Details Docker Build and Push / integration-test (pull_request) Successful in 2m31s Details PR Checks / pytest (pull_request) Successful in 3m11s Details Docker Build and Push / build (pull_request) Successful in 2m6s Details	2026-10-18 22:14:36 -04:00
jcabillot	2e247141fc	Merge pull request 'ci(tag): déclenche Renovate sur tf-depl-kubernetes dès que l'image de release est poussée (mcp-maildir)' (#62 ) from ci/renovate-dispatch-on-release into main Main Release / hadolint (push) Successful in 37s Details Docker Build and Push / test (push) Successful in 4m47s Details Main Release / test (push) Successful in 4m57s Details Docker Build and Push / integration-test (push) Successful in 5m53s Details Renovate / renovate (push) Successful in 1m32s Details Main Release / integration-test (push) Successful in 7m25s Details Docker Build and Push / build (push) Successful in 6m22s Details Main Release / build (push) Successful in 6m13s Details Main Release / tag (push) Successful in 20s Details Tag Release / hadolint (push) Successful in 37s Details Tag Release / test (push) Successful in 3m21s Details Tag Release / integration-test (push) Successful in 4m25s Details Tag Release / build-push (push) Successful in 4m11s Details Tag Release / trigger-renovate (push) Failing after 20s Details PR Checks / hadolint (pull_request) Successful in 12s Details Docker Build and Push / test (pull_request) Successful in 1m44s Details PR Checks / build-test (pull_request) Successful in 15s Details Docker Build and Push / integration-test (pull_request) Successful in 2m18s Details PR Checks / pytest (pull_request) Successful in 1m47s Details Docker Build and Push / build (pull_request) Successful in 2m35s Details Reviewed-on: #62	2026-10-18 14:42:34 -04:00
opencodecabilloteu	ef480dfd97	ci(tag): dispatch Renovate on tf-depl-kubernetes once the release image is pushed PR Checks / hadolint (pull_request) Successful in 28s Details PR Checks / pytest (pull_request) Successful in 7m14s Details PR Checks / build-test (pull_request) Successful in 5m15s Details Docker Build and Push / test (pull_request) Successful in 3m40s Details Docker Build and Push / integration-test (pull_request) Successful in 3m54s Details Docker Build and Push / build (pull_request) Successful in 3m4s Details A release only reached perso_private/tf-depl-kubernetes on the next hourly Renovate scan, so the image bump PR could lag up to an hour behind the tag. After the image push completes, dispatch that repo's Renovate workflow through the Gitea API (workflow_dispatch is already enabled there). It authenticates with the RENOVATE_TOKEN org secret of this organisation — the same token the Renovate instance itself uses, no extra credential. The job fails loudly so a rotated token shows up instead of the trigger silently going missing.	2026-10-18 13:22:32 -04:00