Merge pull request 'ci(tag): déclenche Renovate sur tf-depl-kubernetes dès que l'image de release est poussée (sabnzbd)' (#46 ) from ci/renovate-dispatch-on-release into master

Reviewed-on: #46
ci(tag): dispatch Renovate on tf-depl-kubernetes once the release image is pushed
2026-10-18 13:47:01 -04:00 · 2026-10-18 13:23:26 -04:00 · 2026-09-18 05:00:23 -04:00 · 2026-09-18 08:33:38 +00:00 · 2026-09-17 05:01:15 -04:00 · 2026-09-17 08:34:50 +00:00
6 changed files with 44 additions and 13 deletions
@@ -9,7 +9,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: hadolint/hadolint-action@2a66e89f53d0771bb131a7fa31f3136336094aa6 # v3.4.0
+      - uses: hadolint/hadolint-action@06be81baf89a55ffd0e24b8f04a4185738dd3387 # v3.5.0
        continue-on-error: true
        with:
          dockerfile: Dockerfile
@@ -20,7 +20,7 @@ jobs:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
          fetch-depth: 0
-      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
@@ -35,7 +35,7 @@ jobs:
          images: jcabillot/sabnzbd
          tags: |
            type=raw,value=${{ steps.get-latest-tag.outputs.tag }}-latest,enable=${{ steps.get-latest-tag.outputs.tag != '' }}
-      - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+      - uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
        with:
          context: .
          push: true
@@ -9,7 +9,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: hadolint/hadolint-action@2a66e89f53d0771bb131a7fa31f3136336094aa6 # v3.4.0
+      - uses: hadolint/hadolint-action@06be81baf89a55ffd0e24b8f04a4185738dd3387 # v3.5.0
        continue-on-error: true
        with:
          dockerfile: Dockerfile
@@ -18,7 +18,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
      - run: docker build --load -t ci-image:${{ github.sha }} .
      - run: bash tests/test.sh ci-image:${{ github.sha }}

@@ -27,7 +27,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
      - run: docker build -t jcabillot/sabnzbd:${{ github.sha }} .

  tag:
@@ -9,7 +9,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: hadolint/hadolint-action@2a66e89f53d0771bb131a7fa31f3136336094aa6 # v3.4.0
+      - uses: hadolint/hadolint-action@06be81baf89a55ffd0e24b8f04a4185738dd3387 # v3.5.0
        continue-on-error: true
        with:
          dockerfile: Dockerfile
@@ -18,6 +18,6 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
      - run: docker build -t ci-image:${{ github.sha }} .
      - run: bash tests/test.sh ci-image:${{ github.sha }}
@@ -0,0 +1,12 @@
+name: Renovate
+
+on:
+  push:
+    branches:
+      - master
+  workflow_dispatch:
+
+jobs:
+  renovate:
+    uses: perso/gitea-pipelines/.gitea/workflows/renovate.yaml@main
+    secrets: inherit
@@ -9,7 +9,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: hadolint/hadolint-action@2a66e89f53d0771bb131a7fa31f3136336094aa6 # v3.4.0
+      - uses: hadolint/hadolint-action@06be81baf89a55ffd0e24b8f04a4185738dd3387 # v3.5.0
        continue-on-error: true
        with:
          dockerfile: Dockerfile
@@ -18,7 +18,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
      - run: docker build --load -t ci-image:${{ github.sha }} .
      - run: bash tests/test.sh ci-image:${{ github.sha }}

@@ -27,7 +27,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
@@ -39,10 +39,29 @@ jobs:
          tags: |
            type=ref,event=tag
            type=ref,event=tag,suffix=-latest
-      - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+      - uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
        with:
          context: .
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          pull: true
+
+  trigger-renovate:
+    # The deployment repo perso_private/tf-depl-kubernetes pins this image; its
+    # Renovate instance only scans hourly, so this dispatch opens the image bump
+    # PR within minutes of the release instead of up to an hour later.
+    needs: [build-push]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Trigger Renovate on perso_private/tf-depl-kubernetes
+        # needs: build-push — Renovate reads Docker Hub, so a scan started before
+        # the push lands would only see the previous release.
+        # RENOVATE_TOKEN is the org-level secret of this organisation.
+        run: |
+          curl -sS -f -X POST \
+            -u "renovate:${{ secrets.RENOVATE_TOKEN }}" \
+            -H "Content-Type: application/json" \
+            -d '{{"ref":"main"}}' \
+            "https://scm.cabillot.eu/api/v1/repos/perso_private/tf-depl-kubernetes/actions/workflows/renovate.yaml/dispatches"
+          echo "Renovate dispatched on perso_private/tf-depl-kubernetes"
@@ -22,7 +22,7 @@ ENV LANG C.UTF-8
 #

 # hadolint ignore=DL3008,DL3015,SC3009,DL3003,DL3013,DL3042
-RUN export SABNZBD_VERSION=5.0.4 PAR2CMDLINE_VERSION=v0.6.14-mt1 && \
+RUN export SABNZBD_VERSION=5.1.3 PAR2CMDLINE_VERSION=v0.6.14-mt1 && \
    export DEBIAN_FRONTEND=noninteractive && \
    export PIP_BREAK_SYSTEM_PACKAGES=1 && \
    export BUILD_PACKAGES="automake build-essential python3-dev libffi-dev" && \
Author	SHA1	Message	Date
jcabillot	64bb087fd4	Merge pull request 'ci(tag): déclenche Renovate sur tf-depl-kubernetes dès que l'image de release est poussée (sabnzbd)' (#46 ) from ci/renovate-dispatch-on-release into master Main Release / hadolint (push) Successful in 13s Details Renovate / renovate (push) Successful in 1m35s Details Main Release / test (push) Successful in 9m46s Details Main Release / build (push) Successful in 27s Details Main Release / tag (push) Successful in 24s Details Tag Release / hadolint (push) Successful in 3m43s Details Tag Release / test (push) Successful in 8m22s Details Tag Release / build-push (push) Successful in 13m43s Details Tag Release / trigger-renovate (push) Failing after 4s Details Reviewed-on: #46	2026-10-18 13:47:01 -04:00
opencodecabilloteu	328a4a11aa	ci(tag): dispatch Renovate on tf-depl-kubernetes once the release image is pushed PR Checks / hadolint (pull_request) Successful in 10s Details PR Checks / build-test (pull_request) Successful in 8m34s Details A release only reached perso_private/tf-depl-kubernetes on the next hourly Renovate scan, so the image bump PR could lag up to an hour behind the tag. After the image push completes, dispatch that repo's Renovate workflow through the Gitea API (workflow_dispatch is already enabled there). It authenticates with the RENOVATE_TOKEN org secret of this organisation — the same token the Renovate instance itself uses, no extra credential. The job fails loudly so a rotated token shows up instead of the trigger silently going missing.	2026-10-18 13:23:26 -04:00
opencodecabilloteu	a5936c01e3	Merge pull request 'chore(deps): update docker/setup-buildx-action digest to f87e599' (#45 ) from renovate/docker-setup-buildx-action-digest into master Main Release / hadolint (push) Successful in 9s Details Renovate / renovate (push) Successful in 36s Details Main Release / test (push) Successful in 3m6s Details Main Release / build (push) Successful in 20s Details Main Release / tag (push) Successful in 12s Details Tag Release / hadolint (push) Successful in 8s Details Tag Release / test (push) Successful in 26s Details Tag Release / build-push (push) Successful in 3m7s Details	2026-09-18 05:00:23 -04:00
renovate	79c8d25d22	chore(deps): update docker/setup-buildx-action digest to f87e599 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 8s Details PR Checks / build-test (pull_request) Successful in 3m33s Details	2026-09-18 08:33:38 +00:00
opencodecabilloteu	1d4bee660f	Merge pull request 'chore(deps): update docker/build-push-action action to v7.4.0' (#44 ) from renovate/docker-build-push-action-7.x into master Main Release / hadolint (push) Successful in 13s Details Renovate / renovate (push) Successful in 56s Details Main Release / test (push) Successful in 4m18s Details Main Release / build (push) Successful in 21s Details Main Release / tag (push) Successful in 14s Details Tag Release / hadolint (push) Successful in 12s Details Tag Release / test (push) Successful in 40s Details Tag Release / build-push (push) Successful in 5m19s Details	2026-09-17 05:01:15 -04:00
renovate	ae9cc6fbde	chore(deps): update docker/build-push-action action to v7.4.0 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 11s Details PR Checks / build-test (pull_request) Successful in 4m33s Details	2026-09-17 08:34:50 +00:00
jcabillot	206e5c08cf	Merge pull request 'chore(deps): update dependency sabnzbd/sabnzbd to v5.1.3' (#43 ) from renovate/sabnzbd-sabnzbd-5.x into master Main Release / hadolint (push) Successful in 8s Details Renovate / renovate (push) Successful in 36s Details Main Release / test (push) Successful in 4m55s Details Main Release / build (push) Successful in 27s Details Main Release / tag (push) Successful in 15s Details Tag Release / hadolint (push) Successful in 11s Details Tag Release / test (push) Successful in 36s Details Tag Release / build-push (push) Successful in 4m23s Details Reviewed-on: #43	2026-09-13 10:46:47 -04:00
renovate	79a968da61	chore(deps): update dependency sabnzbd/sabnzbd to v5.1.3 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 17s Details PR Checks / build-test (pull_request) Successful in 4m34s Details	2026-09-10 10:32:33 +00:00
opencodecabilloteu	6dd8c6c3f7	Merge pull request 'chore(deps): update dependency sabnzbd/sabnzbd to v5.1.2' (#42 ) from renovate/sabnzbd-sabnzbd-5.x into master Main Release / hadolint (push) Successful in 20s Details Renovate / renovate (push) Successful in 1m4s Details Main Release / test (push) Failing after 3m40s Details Main Release / build (push) Skipped Details Main Release / tag (push) Skipped Details	2026-08-27 12:00:40 -04:00
renovate	1eb0d52dd0	chore(deps): update dependency sabnzbd/sabnzbd to v5.1.2 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 21s Details PR Checks / build-test (pull_request) Successful in 4m25s Details	2026-08-27 15:30:15 +00:00
opencodecabilloteu	9522cc602f	Merge pull request 'chore(deps): update hadolint/hadolint-action action to v3.5.0' (#41 ) from renovate/hadolint-hadolint-action-3.x into master Main Release / hadolint (push) Successful in 20s Details Renovate / renovate (push) Successful in 1m19s Details Main Release / test (push) Successful in 5m18s Details Main Release / build (push) Successful in 5m58s Details Main Release / tag (push) Successful in 27s Details Tag Release / hadolint (push) Successful in 15s Details Tag Release / test (push) Successful in 1m4s Details Tag Release / build-push (push) Successful in 5m10s Details	2026-08-26 11:00:29 -04:00
renovate	7bb92ee69c	chore(deps): update hadolint/hadolint-action action to v3.5.0 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 15s Details PR Checks / build-test (pull_request) Successful in 5m16s Details	2026-08-26 14:34:09 +00:00
opencodecabilloteu	c35324d235	Merge pull request 'chore(deps): update docker/setup-buildx-action digest to 37fe631' (#40 ) from renovate/docker-setup-buildx-action-digest into master Main Release / test (push) Successful in 54s Details Main Release / hadolint (push) Successful in 12s Details Main Release / build (push) Successful in 32s Details Renovate / renovate (push) Successful in 2m52s Details Main Release / tag (push) Successful in 24s Details Tag Release / hadolint (push) Successful in 14s Details Tag Release / test (push) Successful in 53s Details Tag Release / build-push (push) Successful in 4m48s Details	2026-08-21 07:31:20 -04:00
renovate	a1248dbd7d	chore(deps): update docker/setup-buildx-action digest to 37fe631 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / build-test (pull_request) Successful in 5m28s Details PR Checks / hadolint (pull_request) Successful in 16s Details	2026-08-21 10:43:37 +00:00
opencodecabilloteu	1f4458f216	Merge pull request 'chore(deps): update dependency sabnzbd/sabnzbd to v5.1.1' (#39 ) from renovate/sabnzbd-sabnzbd-5.x into master Main Release / hadolint (push) Successful in 22s Details Renovate / renovate (push) Successful in 1m6s Details Main Release / test (push) Failing after 4m15s Details Main Release / build (push) Skipped Details Main Release / tag (push) Skipped Details	2026-08-20 13:04:12 -04:00
renovate	41fac1f5d9	chore(deps): update dependency sabnzbd/sabnzbd to v5.1.1 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 18s Details PR Checks / build-test (pull_request) Successful in 4m40s Details	2026-08-20 16:38:50 +00:00
opencodecabilloteu	87ce83d257	Merge pull request 'chore(deps): update dependency sabnzbd/sabnzbd to v5.1.0' (#38 ) from renovate/sabnzbd-sabnzbd-5.x into master Main Release / hadolint (push) Successful in 21s Details Renovate / renovate (push) Successful in 1m2s Details Main Release / test (push) Failing after 5m48s Details Main Release / build (push) Skipped Details Main Release / tag (push) Skipped Details	2026-08-17 17:31:22 -04:00
renovate	0f467bbdd7	chore(deps): update dependency sabnzbd/sabnzbd to v5.1.0 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 30s Details PR Checks / build-test (pull_request) Successful in 6m0s Details	2026-08-12 11:49:29 +00:00
jcabillot	b025cb7c43	Merge pull request 'ci: add Renovate workflow' (#37 ) from add-renovate-workflow into master Main Release / hadolint (push) Successful in 27s Details Main Release / test (push) Successful in 1m44s Details Renovate / renovate (push) Successful in 3m3s Details Main Release / build (push) Successful in 9m31s Details Main Release / tag (push) Successful in 1m22s Details Tag Release / hadolint (push) Successful in 27s Details Tag Release / test (push) Successful in 9m33s Details Tag Release / build-push (push) Successful in 7m34s Details Reviewed-on: #37	2026-08-03 16:13:35 -04:00
OpenCode Cabillot	cc79028481	ci: add Renovate workflow PR Checks / hadolint (pull_request) Successful in 15s Details PR Checks / build-test (pull_request) Successful in 3m43s Details	2026-08-02 23:51:52 +00:00