Commit 86f5f6a6 authored by Michael Kriese's avatar Michael Kriese
Browse files

feat!: only renovate image to major version (renovate-bot/renovate-runner!3294) 


BREAKING CHANGE: Renovate image is only pinned to major version docker tag. Addistionally the `pull_policy` is set to `always` to force image updates. This requires GitLab 15.4.
parent c744c300

README.md

+14 −2
Original line number Diff line number Diff line
@@ -54,8 +54,20 @@ include: 
    - project: 'renovate-bot/renovate-runner'

      file: '/templates/renovate.gitlab-ci.yml'



renovate:

    image: ghcr.io/renovatebot/renovate:full

variables:

    CI_RENOVATE_IMAGE: ghcr.io/renovatebot/renovate:full

```



You can also pin the renovate version to the full docker tag.

Can be any docker image reference including digest.



```yaml

include:

    - project: 'renovate-bot/renovate-runner'

      file: '/templates/renovate.gitlab-ci.yml'



variables:

    CI_RENOVATE_IMAGE: ghcr.io/renovatebot/renovate:39.161.5@sha256:703e18ee0536d459ecb9d62d7ead6ecb0001f52b12b5f9c0264fd8b007051f5e

```



To prevent unexpected changes in your pipeline, you can pin the version of this template and include it in your Renovate updates:

templates/renovate-config-validator.gitlab-ci.yml

+4 −2
Original line number Diff line number Diff line 
variables:

  RENOVATE_ENDPOINT: $CI_API_V4_URL

  RENOVATE_PLATFORM: gitlab

  CI_RENOVATE_IMAGE: ghcr.io/renovatebot/renovate:39.161.6@sha256:c643bcac07ef1d63f98b57855f991591a92773f0d2ab899acc6d01600caa7532

  CI_RENOVATE_IMAGE: ghcr.io/renovatebot/renovate:39



renovate-config-validator:

  stage: test

  image: $CI_RENOVATE_IMAGE

  image:

    name: ${CI_RENOVATE_IMAGE}

    pull_policy: always

  script:

    - renovate-config-validator $RENOVATE_CONFIG_VALIDATOR_EXTRA_FLAGS

templates/renovate.gitlab-ci.yml

+4 −2
Original line number Diff line number Diff line
@@ -7,14 +7,16 @@ variables: 
  RENOVATE_REPOSITORY_CACHE: 'enabled'

  LOG_FILE: renovate-log.ndjson

  LOG_FILE_LEVEL: debug

  CI_RENOVATE_IMAGE: ghcr.io/renovatebot/renovate:39.161.6@sha256:c643bcac07ef1d63f98b57855f991591a92773f0d2ab899acc6d01600caa7532

  CI_RENOVATE_IMAGE: ghcr.io/renovatebot/renovate:39



.renovate:

  cache:

    key: ${CI_COMMIT_REF_SLUG}-renovate

    paths:

      - renovate/cache/renovate/repository/

  image: ${CI_RENOVATE_IMAGE}

  image:

    name: ${CI_RENOVATE_IMAGE}

    pull_policy: always

  script:

    - renovate $RENOVATE_EXTRA_FLAGS