fix(renovate): restore grouped Docker update PRs #191

Merged

morten-olsen merged 5 commits from fix/homeit-510-renovate into main

2026-11-01 19:54:33 +01:00

morten-olsen commented

2026-11-01 19:53:33 +01:00

Owner

Summary

Renovate discovers the unpinned Forgejo runner-label images but cannot add their first digest. Because Docker updates share one branch, this stops the entire Docker update PR from appearing. Construct the full image reference when replacing it:

 docker://repository:tag
+docker://repository:tag@sha256:digest

Add a credential-free CI check against the same pinned Renovate runtime and a troubleshooting note. No application versions or deployment values change.

Evidence

Before: apps #490–492 report success but log Error updating branch: update failure; the Dependency Dashboard marks the Docker group errored and no PR exists. Regression pipeline #496 reproduces Error: update-failure in Renovate's actual replacement function.
After: #497 validates the config and passes missing-digest, digest-refresh/duplicate-label, and combined tag/digest cases. Workflow lint and diff checks pass. PR pipeline #498 is green: all charts passed Helm lint/render, schema checks and chart tests; the Renovate config/regression check also passed.
Docker Hub additionally exhausted its anonymous quota during diagnostic #494 (429, remaining 0/100 per hour); live scan verification remains pending that external limit.

Merge danger

Door: two-way. Reverting restores the previous Renovate rule.

Blast radius: pipeline. Only dependency PR generation and its CI test change; scheduled Renovate still requires manual merges of its PRs. No release publishing automation exists in this repository's merge path.

Rollback and verification

Roll back: revert this PR; already generated update PRs remain open for review.
Verify after rollout: inspect a real Renovate run and the resulting Forgejo Docker update PR; confirm expected mirror revision. Record any registry-limited dependencies as unverified.
Reviewers: owner review; existing image sources, token wiring and permissions are unchanged.

HOMEIT-510

## Summary Renovate discovers the unpinned Forgejo runner-label images but cannot add their first digest. Because Docker updates share one branch, this stops the entire Docker update PR from appearing. Construct the full image reference when replacing it: ```diff docker://repository:tag +docker://repository:tag@sha256:digest ``` Add a credential-free CI check against the same pinned Renovate runtime and a troubleshooting note. No application versions or deployment values change. ## Evidence - Before: apps #490–492 report success but log `Error updating branch: update failure`; the Dependency Dashboard marks the Docker group errored and no PR exists. Regression pipeline #496 reproduces `Error: update-failure` in Renovate's actual replacement function. - After: #497 validates the config and passes missing-digest, digest-refresh/duplicate-label, and combined tag/digest cases. Workflow lint and diff checks pass. PR pipeline #498 is green: all charts passed Helm lint/render, schema checks and chart tests; the Renovate config/regression check also passed. - Docker Hub additionally exhausted its anonymous quota during diagnostic #494 (429, remaining 0/100 per hour); live scan verification remains pending that external limit. ## Merge danger **Door:** two-way. Reverting restores the previous Renovate rule. **Blast radius:** pipeline. Only dependency PR generation and its CI test change; scheduled Renovate still requires manual merges of its PRs. No release publishing automation exists in this repository's merge path. ## Rollback and verification - **Roll back:** revert this PR; already generated update PRs remain open for review. - **Verify after rollout:** inspect a real Renovate run and the resulting Forgejo Docker update PR; confirm expected mirror revision. Record any registry-limited dependencies as unverified. - **Reviewers:** owner review; existing image sources, token wiring and permissions are unchanged. HOMEIT-510

morten-olsen added 5 commits

2026-11-01 19:53:33 +01:00