35 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Renovate Bot	5d40809717	chore(deps): update https://git.keligrubb.com/actions/setup-node action to v7 (#7) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://git.keligrubb.com/actions/setup-node](https://git.keligrubb.com/actions/setup-node) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-node (https://git.keligrubb.com/actions/setup-node)</summary> ### [`v7.0.0`](https://git.keligrubb.com/actions/setup-node/compare/v7...v7) [Compare Source](https://git.keligrubb.com/actions/setup-node/compare/v7...v7) ### [`v7`](https://git.keligrubb.com/actions/setup-node/compare/v6.5.0...v7) [Compare Source](https://git.keligrubb.com/actions/setup-node/compare/v6.5.0...v7) </details> --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjUuNCIsInVwZGF0ZWRJblZlciI6IjQzLjI2NS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #7 Co-authored-by: Renovate Bot <renovate@keligrubb.com>	2026-08-13 14:40:58 +00:00
Keli GrubbandMadison Grubb	6e7190e985	improve renovate: osv vulnerability alerts, abandonment reporting, pr limits (#8) ... ## Summary * turn on `osvVulnerabilityAlerts` + `vulnerabilityAlerts` so vulnerable deps get their own PRs labeled `security`, instead of just riding along in the grouped non-major PR * vuln PRs still respect the 3 day `minimumReleaseAge` cooldown on purpose. bypassing it would let a compromised release (shai-hulud style) land the moment it publishes, which is worse than sitting on a known cve for 3 days * add `abandonments:recommended` so unmaintained packages get flagged early * add `dependencies` label plus `prConcurrentLimit` / `prHourlyLimit` of 5 so a first run on a stale repo doesn't dump 30 prs * no workflow behavior changes. schedule stays hourly, install stays as-is. just fixed the readme, which said every 6 hours while the cron was hourly needs `dependencies` and `security` labels to exist on the repos (or org-wide), otherwise labeling just no-ops. --------- Co-authored-by: Madison Grubb <madison@elastiflow.com> Reviewed-on: #8	2026-08-13 14:33:55 +00:00
Renovate Bot	857b50ab3a	chore(deps): update https://git.keligrubb.com/actions/cache action to v6 (#6) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://git.keligrubb.com/actions/cache](https://git.keligrubb.com/actions/cache) | action | major | `v5` → `v6` | --- ### Release Notes <details> <summary>actions/cache (https://git.keligrubb.com/actions/cache)</summary> ### [`v6.0.0`](https://git.keligrubb.com/actions/cache/compare/v6.0.0...v6.0.0) [Compare Source](https://git.keligrubb.com/actions/cache/compare/v6.0.0...v6.0.0) ### [`v6`](https://git.keligrubb.com/actions/cache/compare/v5.0.5...v6.0.0) [Compare Source](https://git.keligrubb.com/actions/cache/compare/v5.0.5...v6.0.0) </details> --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDQuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI0NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #6 Co-authored-by: Renovate Bot <renovate@keligrubb.com> Co-committed-by: Renovate Bot <renovate@keligrubb.com>	2026-06-26 15:26:55 +00:00
Renovate Bot	3f08434f89	chore(deps): update https://git.keligrubb.com/actions/checkout action to v7 (#5) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://git.keligrubb.com/actions/checkout](https://git.keligrubb.com/actions/checkout) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (https://git.keligrubb.com/actions/checkout)</summary> ### [`v7.0.0`](https://git.keligrubb.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://git.keligrubb.com/actions/checkout/compare/v7...v7) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2454](https://github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2458](https://github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2460](https://github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2461](https://github.com/actions/checkout/pull/2461) - Bump [@&#8203;actions/core](https://github.com/actions/core) and [@&#8203;actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2459](https://github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2463](https://github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2462](https://github.com/actions/checkout/pull/2462) ### [`v7`](https://git.keligrubb.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://git.keligrubb.com/actions/checkout/compare/v6.0.3...v7) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2454](https://github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2458](https://github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2460](https://github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2461](https://github.com/actions/checkout/pull/2461) - Bump [@&#8203;actions/core](https://github.com/actions/core) and [@&#8203;actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2459](https://github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2463](https://github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2462](https://github.com/actions/checkout/pull/2462) </details> --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMzMuNCIsInVwZGF0ZWRJblZlciI6IjQzLjIzMy40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #5 Co-authored-by: Renovate Bot <renovate@keligrubb.com> Co-committed-by: Renovate Bot <renovate@keligrubb.com>	2026-06-21 04:22:22 +00:00
Madison Grubb	d302725146	use semantic commits. cleanup pr body. set release age to 3 days.	2026-04-15 11:22:25 -04:00
Keli Grubb	76cd280729	fix npm updates i think	2026-04-14 22:05:21 -04:00
Keli Grubb	932dd2f202	improve matches for npm	2026-04-14 21:54:48 -04:00
Keli Grubb	555216af73	swap to auto instead of replace	2026-04-14 21:45:22 -04:00
Keli Grubb	86d1f4d89f	use local ci action mirrors	2026-03-12 19:53:00 +00:00
Keli Grubb	e819b2faba	Update README.md	2026-03-05 16:01:46 +00:00
Keli Grubb	132b566880	move from every 6 hours to hourly	2026-03-05 16:01:24 +00:00
Madison Grubb	04ccad1bb4	drop github action digest pinning	2026-03-04 11:47:18 -05:00
Madison Grubb	a04c067214	use specific node version	2026-03-04 11:34:37 -05:00
Madison Grubb	ed61653d3f	use renovate cli directly	2026-03-04 11:32:03 -05:00
Madison Grubb	021445d123	move renovate down a dir	2026-03-04 11:22:33 -05:00
Madison Grubb	6fa5e57f7c	use configurationFile with option instead of env var	2026-03-04 11:21:00 -05:00
Madison Grubb	22a1c8f0e7	debug directory file perms	2026-03-04 11:11:19 -05:00
Madison Grubb	23bf85ae03	try using full image	2026-03-04 11:05:59 -05:00
Madison Grubb	883763984b	fixrw	2026-03-04 10:42:24 -05:00
Madison Grubb	11358c5b79	more debugging	2026-03-04 10:40:29 -05:00
Madison Grubb	b343bdde5e	fix version	2026-03-04 10:31:01 -05:00
Madison Grubb	df1cfd840a	debug docker	2026-03-04 10:27:24 -05:00
Madison Grubb	0a2ff1298f	mount docker socket	2026-03-04 10:24:19 -05:00
Madison Grubb	4252cc5551	set renovate version	2026-03-04 10:15:21 -05:00
Madison Grubb	4294b4d929	remove woodpecker parts from config	2026-03-04 10:10:59 -05:00
Madison Grubb	c81d1f52e6	fix versioning	2026-03-04 10:07:41 -05:00
Madison Grubb	d4ec6c6b71	replace woodpecker ci with gitea actions	2026-03-04 10:02:00 -05:00
Keli Grubb	8c9a95f85d	move to recommended instead of best-practices in order to fix caret and digest requests	2026-02-22 15:40:11 -05:00
Keli Grubb	c26a198936	fix warnings from renovate run. cleanup presets for docker	2026-02-22 15:30:06 -05:00
Keli Grubb	faf44ad0d7	fix docker and range strategy	2026-02-22 15:22:10 -05:00
Keli GrubbandCursor	a42bbc27ef	Merge origin/main, keep renovate fixes (full image, GitHub token) ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-22 12:46:42 -05:00
Keli Grubb	f8e41272f3	fix renovate setup	2026-02-22 12:45:07 -05:00
Keli Grubb	66ea3e90b0	Merge pull request 'Pin renovate/renovate Docker tag to 99198d6' (#1) from renovate/pin-dependencies into main ... Reviewed-on: #1	2026-02-22 02:28:58 +00:00
Renovate Bot	e1fdec0b0c	Pin renovate/renovate Docker tag to 99198d6	2026-02-22 02:25:54 +00:00
Keli Grubb	d9e0ef5991	first commit	2026-02-21 21:23:43 -05:00