Sergei Poljanski
2aca0d7669
Versions are pinned across the Ansible vars, compose files, Terraform providers and workflows, and nothing says when one is behind. Run Renovate daily from Forgejo Actions: one PR per available bump, with the upstream changelog in the body, which the deploy pipeline then dry-runs like any other branch. Variables are tracked through a "# renovate: datasource=... depName=..." comment above them; Forgejo, Traefik, the runner and its nix image get one here. The Paper JRE tag is left alone, the runner and nix bumps carry their manual follow-up steps in the PR, and Renovate's own image is bumped monthly. Needs the repository secrets RENOVATE_TOKEN (bot user with write access) and GH_COM_TOKEN (read-only github.com token for release notes). Assisted-by: Claude:opus-5-5
8 lines
237 B
YAML
8 lines
237 B
YAML
---
|
|
# renovate: datasource=docker depName=traefik
|
|
traefik_version: "v3.7.18"
|
|
traefik_base_path: "{{ services_base_path }}/traefik"
|
|
traefik_dashboard_port: 8080
|
|
traefik_network: traefik
|
|
|
|
letsencrypt_email: "{{ vault_letsencrypt_email }}"
|