2026-10-18 14:42:37 -04:00
1 changed files with 20 additions and 1 deletions
@@ -94,4 +94,23 @@ jobs:
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
-          pull: true
+          pull: true
  trigger-renovate:
    # The deployment repo perso_private/tf-depl-kubernetes pins this image; its
    # Renovate instance only scans hourly, so this dispatch opens the image bump
    # PR within minutes of the release instead of up to an hour later.
    needs: [build-push]
    runs-on: ubuntu-latest
    steps:
      - name: Trigger Renovate on perso_private/tf-depl-kubernetes
        # needs: build-push — Renovate reads Docker Hub, so a scan started before
        # the push lands would only see the previous release.
        # RENOVATE_TOKEN is the org-level secret of this organisation.
        run: |
          curl -sS -f -X POST \
            -u "renovate:${{ secrets.RENOVATE_TOKEN }}" \
            -H "Content-Type: application/json" \
            -d '{{"ref":"main"}}' \
            "https://scm.cabillot.eu/api/v1/repos/perso_private/tf-depl-kubernetes/actions/workflows/renovate.yaml/dispatches"
          echo "Renovate dispatched on perso_private/tf-depl-kubernetes"