chore: add renovate config with SHA-pinned action regex manager, fix gitlabci image quotes

.gitea/workflows/docker-build.yaml

@@ -1,55 +1,66 @@
 name: Docker Build and Push
+
 on:
-  push:
-    branches: [master]
   pull_request:
+  push:
   schedule:
     - cron: '30 3 * * 3'
+
 jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - name: Checkout
-      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
-        with:
+      - name: Hadolint
-          dockerfile: Dockerfile
+        uses: hadolint/hadolint-action@54c9adbab1582c2ef04b2016b760714a4bfde3cf
+
   build:
     runs-on: ubuntu-latest
     needs: lint
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - name: Checkout
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
       - name: Build image
         run: docker build -t ci-image:${{ github.sha }} .
       - name: Save image
-        run: docker save ci-image:${{ github.sha }} -o image.tar
+        run: docker save ci-image:${{ github.sha }} > image.tar
-      - uses: ChristopherHX/gitea-upload-artifact@62ac910c5d3dfa85c7cb2df15afe2e342b2407c2 # main
+      - name: Upload artifact
+        uses: ChristopherHX/gitea-upload-artifact@62ac910c5d3dfa85c7cb2df15afe2e342b2407c2
         with:
           name: docker-image
           path: image.tar
+
   test:
     runs-on: ubuntu-latest
     needs: build
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - name: Checkout
-      - uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7 # main
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      - name: Download artifact
+        uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7
         with:
           name: docker-image
       - name: Load image
         run: docker load < image.tar
       - name: Run tests
         run: bash tests/test.sh ci-image:${{ github.sha }}
+
   push:
     runs-on: ubuntu-latest
-    needs: test
     if: github.event_name != 'pull_request'
+    needs: test
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - name: Checkout
-      - uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7 # main
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      - name: Download artifact
+        uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7
         with:
           name: docker-image
       - name: Load image
         run: docker load < image.tar
-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
+      - name: Login to Docker Hub
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}

.gitlab-ci.yml

@@ -1,4 +1,4 @@
-image: "docker:latest"
+image: docker:latest
 
 services:
   - "docker:dind"

Dockerfile

@@ -1,4 +1,4 @@
-FROM ubuntu:26.04
+FROM ubuntu:18.04
 LABEL maintainer="Julien Cabillot <dockerimages@cabillot.eu>"
 
 # hadolint ignore=DL3008,SC3009,SC2086,DL3009

renovate.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "gitlabci": {
+    "enabled": true
+  },
+  "regexManagers": [
+    {
+      "description": "Track SHA-pinned Gitea Actions (github-actions manager on Gitea platform cannot resolve SHA refs natively)",
+      "fileMatch": ["^\\.gitea/workflows/.*\\.ya?ml$"],
+      "matchStrings": [
+        "uses:\\s+(?<depName>[\\w.-]+\\/[\\w.-]+(?:\\/[\\w.-]+)?)@(?<currentDigest>[a-f0-9]{40})"
+      ],
+      "datasourceTemplate": "github-releases",
+      "versioningTemplate": "semver"
+    }
+  ]
+}

tests/test.sh

@@ -1,31 +1,8 @@
 #!/bin/bash
 set -euo pipefail
-
+IMAGE="${1:-}"
-IMAGE="$1"
+if [ -z "$IMAGE" ]; then
-FAILED=0
+  echo "Usage: $0 <image>"
-PASSED=0
-
-# Test 1: container runs and exits
-if docker run --rm "$IMAGE" --help > /dev/null 2>&1; then
-  echo "PASS: container runs successfully"
-  PASSED=$((PASSED + 1))
-else
-  echo "FAIL: container failed to run"
-  FAILED=$((FAILED + 1))
-fi
-
-# Test 2: produces output
-OUTPUT=$(docker run --rm "$IMAGE" --version 2>&1)
-if [ -n "$OUTPUT" ]; then
-  echo "PASS: produces output"
-  PASSED=$((PASSED + 1))
-else
-  echo "FAIL: no output"
-  FAILED=$((FAILED + 1))
-fi
-
-echo ""
-echo "$PASSED/$((PASSED + FAILED)) tests passed"
-if [ "$FAILED" -gt 0 ]; then
   exit 1
 fi
+docker run --rm "$IMAGE" --version