jwright
83edaf5975
build-and-deploy / build (push) Failing after 15m10s
scripts/new-post.mjs writes schema-valid posts from flags or a JSON event (the IaC publish seam). Gitea Actions workflow: ci check, audit-ci gate, build, dist scan, CycloneDX SBOM, buildah build+push, and a least-privilege digest-bump PR to home-ops (never auto-merged). Renovate + audit allowlist.
24 lines
619 B
JSON
24 lines
619 B
JSON
{
|
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
"extends": [
|
|
"config:recommended",
|
|
":semanticCommits",
|
|
"docker:pinDigests"
|
|
],
|
|
"labels": ["dependencies"],
|
|
"lockFileMaintenance": { "enabled": true },
|
|
"packageRules": [
|
|
{
|
|
"description": "Batch non-major npm updates",
|
|
"matchManagers": ["npm"],
|
|
"matchUpdateTypes": ["minor", "patch"],
|
|
"groupName": "npm (non-major)"
|
|
},
|
|
{
|
|
"description": "Keep base images (node, nginx) current and digest-pinned",
|
|
"matchManagers": ["dockerfile"],
|
|
"groupName": "container base images"
|
|
}
|
|
]
|
|
}
|