docker icon indicating copy to clipboard operation
docker copied to clipboard

Dependency Dashboard

Open renovate[bot] opened this issue 7 months ago • 5 comments

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

This repository currently has no open or pending branches.

Detected Dependencies

dockerfile (3)
1.10/Dockerfile (1)
  • php 8-alpine
2.2/Dockerfile (1)
  • php 8-alpine
latest/Dockerfile (1)
  • php 8-alpine
github-actions (4)
.github/workflows/1.10.yaml (17)
  • actions/checkout v6
  • docker/metadata-action v5
  • docker/metadata-action v5
  • actions/checkout v6
  • docker/setup-qemu-action v3
  • docker/setup-buildx-action v3
  • docker/login-action v3
  • docker/login-action v3
  • docker/login-action v3
  • docker/build-push-action v6
  • docker/build-push-action v6
  • actions/upload-artifact v6
  • actions/download-artifact v7
  • docker/setup-buildx-action v3
  • docker/login-action v3
  • docker/login-action v3
  • docker/login-action v3
.github/workflows/2.2.yaml (17)
  • actions/checkout v6
  • docker/metadata-action v5
  • docker/metadata-action v5
  • actions/checkout v6
  • docker/setup-qemu-action v3
  • docker/setup-buildx-action v3
  • docker/login-action v3
  • docker/login-action v3
  • docker/login-action v3
  • docker/build-push-action v6
  • docker/build-push-action v6
  • actions/upload-artifact v6
  • actions/download-artifact v7
  • docker/setup-buildx-action v3
  • docker/login-action v3
  • docker/login-action v3
  • docker/login-action v3
.github/workflows/latest.yaml (17)
  • actions/checkout v6
  • docker/metadata-action v5
  • docker/metadata-action v5
  • actions/checkout v6
  • docker/setup-qemu-action v3
  • docker/setup-buildx-action v3
  • docker/login-action v3
  • docker/login-action v3
  • docker/login-action v3
  • docker/build-push-action v6
  • docker/build-push-action v6
  • actions/upload-artifact v6
  • actions/download-artifact v7
  • docker/setup-buildx-action v3
  • docker/login-action v3
  • docker/login-action v3
  • docker/login-action v3
.github/workflows/shellcheck.yaml (1)
  • actions/checkout v6
regex (2)
2.2/Dockerfile (1)
  • composer/composer 2.2.25
latest/Dockerfile (1)
  • composer/composer 2.9.2

  • [ ] Check this box to trigger a request for Renovate to run again on this repository

renovate[bot] avatar May 19 '25 09:05 renovate[bot]

@alcohol I think there's a way to trigger the PR's automatically by changing the config but right now it's manual from this issue.

You can also see what assets it's currently configured on.

inverse avatar May 20 '25 19:05 inverse

Not sure I understand the error here. The 2.2 branch does not relate to the version mentioned (2.8.9)?

alcohol avatar May 20 '25 20:05 alcohol

Ahh I think I know what's missing... let me PR a fix

inverse avatar May 20 '25 20:05 inverse

Thanks for fixing that, totally didn't think that another rule would need to be added to explicitly disable those for that file.

Found out you can create a branch called renovate/<something> which would run the configuration to show if its valid or not.

Could prob simply those rules to:

    "packageRules": [
        {
            "description": "Disables major and minor updates for composer/composer in 2.2",
            "matchFileNames": [
                "2.2/Dockerfile"
            ],
            "matchPackageNames": [
                "composer/composer"
            ],
            "matchUpdateTypes": [
                "major",
                "minor"
            ],
            "enabled": false
        },
        {
            "description": "Configures updates for composer/composer in 2.2",
            "matchFileNames": [
                "2.2/Dockerfile"
            ],
            "matchPackageNames": [
                "composer/composer"
            ],
            "matchUpdateTypes": [
                "patch"
            ],
            "commitMessageSuffix": " (2.2)",
            "additionalBranchPrefix": "2.2-"
        },
        {
            "description": "Configures updates for composer/composer in latest",
            "matchFileNames": [
                "latest/Dockerfile"
            ],
            "matchPackageNames": [
                "composer/composer"
            ],
            "commitMessageSuffix": " (Latest)",
            "additionalBranchPrefix": "latest-"
        }
    ],

Which removes the explicit enable and unrequired

        {
            "matchPackageNames": [
                "composer/composer"
            ],
            "enabled": true
        },

inverse avatar May 22 '25 22:05 inverse

Yeah that sounds good to me. Feel free to submit a PR. Otherwise I will try to pick it up sometime next week.

alcohol avatar May 23 '25 13:05 alcohol