okxlin
ad95d14bec
Tighten Renovate multi-service safeguards ( #4769 )
2026-07-12 16:23:35 +08:00
okxlin
3203b67f4e
Retire uninstallable legacy apps ( #4768 )
2026-07-12 16:04:14 +08:00
okxlin
6425fca696
Use official WuKongIM image sources ( #4764 )
2026-07-12 15:36:32 +08:00
okxlin
13acebf9c4
Make Mend primary for Compose updates ( #4761 )
2026-07-12 15:06:20 +08:00
okxlin
fe97d6f2c8
Improve Renovate rate-limit recovery ( #4760 )
2026-07-12 14:38:44 +08:00
okxlin
9a49d3898b
Add a Docker Hub credential preflight
...
Validate the configured Docker Hub credentials against the token service and a public manifest before starting a full Renovate scan. Provide a small manual workflow so maintainers can diagnose authentication without consuming a full scan.
2026-07-12 11:09:58 +08:00
okxlin
d26004a6ca
Harden Renovate caching and digest versioning
...
Strip image digests before deriving app directory versions, while continuing to reject digest-only images. Document the cache privacy boundary, restrict the workflow token to read-only, and bound full scans to 90 minutes.
2026-07-12 10:36:01 +08:00
okxlin
de60c0882d
Persist the self-hosted Renovate cache
...
Restore and save Renovate's public lookup and repository extraction cache with a SHA-pinned GitHub action. Keep private package caching disabled and report cache growth for quota monitoring.
2026-07-12 10:06:21 +08:00
okxlin
3f3057ef05
Isolate hosted and self-hosted Renovate controllers
...
Give the Mend App and the self-hosted Docker scanner disjoint manager scopes, branch namespaces, and dependency dashboards so they cannot close each other's PRs. Preserve the existing Compose policy in a dedicated config and document the scaling boundary.
2026-07-12 09:54:43 +08:00
okxlin
10aab1cce5
Harden Renovate application tracks ( #4744 )
2026-07-12 03:16:50 +08:00
okxlin
f786a72d66
Recognize self-hosted Renovate PRs ( #4743 )
2026-07-12 03:09:21 +08:00
okxlin
17adfea361
Reduce full Renovate scan frequency ( #4731 )
2026-07-12 02:49:15 +08:00
okxlin
55e4ad13e3
Explain missing Renovate registry auth ( #4730 )
2026-07-12 02:19:37 +08:00
okxlin
a3c5f371c5
Require Docker Hub auth for Renovate ( #4729 )
2026-07-12 02:16:01 +08:00
okxlin
ac0a4afc3c
Fail incomplete Renovate runs ( #4728 )
2026-07-12 01:45:57 +08:00
okxlin
50fb8bc855
Fix self-hosted Renovate repository target ( #4727 )
...
Explicitly target the current repository so green Renovate runs perform real dependency scanning.
2026-07-12 00:58:25 +08:00
okxlin
305513a4e9
Fix Renovate version selection for multi-service apps ( #4726 )
...
Use changed primary service tags for app directory renames and keep paused Flux Panel releases pinned to 1.4.3.
2026-07-12 00:41:12 +08:00
okxlin
0ad17202a7
chore(renovate): whitelist roundcube and rustdesk-linuxserver
2026-07-07 01:52:24 +08:00
okxlin
0e2718e124
Merge pull request #4582 from okxlin/renovate/renovatebot-github-action-46.x
...
Update renovatebot/github-action action to v46.1.18
2026-07-07 00:24:25 +08:00
renovate[bot]
0c29ff98ec
Update renovatebot/github-action action to v46.1.18
2026-07-06 14:13:39 +00:00
okxlin
eb2fb67377
chore(renovate): whitelist darktable-linuxserver
2026-07-06 22:10:34 +08:00
okxlin
93752f2ff5
chore(renovate): whitelist ungoogled-chromium-linuxserver
2026-07-06 00:19:14 +08:00
okxlin
9982573c85
Soften upgrade-script whitelist heuristic ( #4529 )
2026-07-04 22:04:40 +08:00
okxlin
24946bc4a7
Document Renovate whitelist admission policy ( #4528 )
2026-07-04 21:57:43 +08:00
okxlin
1002207f11
Whitelist azahar-linuxserver for Renovate automerge ( #4527 )
2026-07-04 21:43:07 +08:00
okxlin
d441193fcd
workflow: fix renovate app-version false failures
...
- run the update-app-version workflow only for Renovate pushes or manual dispatch
- skip already-renamed version directories and rolling aliases in the rename helper
- keep follow-up maintainer patches on Renovate branches from tripping the version rename workflow
2026-07-04 20:29:47 +08:00
okxlin
a89df356da
ci(renovate): close sidecar-only bot prs
2026-07-03 21:12:38 +08:00
okxlin
10d379b854
Broaden Renovate automerge coverage
...
Use PR file metadata for the single-service gate so stale but otherwise clean Renovate branches are classified from their actual patch set.
Also whitelist additional single-service apps that match the direct-merge policy and passed the image-only gate.
2026-07-03 20:27:48 +08:00
okxlin
fb98a2bd57
Fix Renovate automerge workflow gating
...
Use the built-in GitHub token for internal workflow dispatches so reconcile can trigger downstream runs without PAT scope mismatches.
Also make the automerge gate inspect the actual base/head git diff, tolerate version-directory renames, and treat ineligible PRs as a skipped gate instead of a failed workflow run.
2026-07-03 20:15:41 +08:00
okxlin
cc190ed341
Improve Renovate gate for multi-variant apps
...
- allow one app to update multiple single-service compose variants
- document Wavelog version guidance and security caution
2026-07-01 19:58:41 +08:00
okxlin
422c25d102
Whitelist safe LinuxServer image-only updates
2026-07-01 19:46:13 +08:00
okxlin
1d9f8284aa
Harden Renovate automerge gate
2026-06-30 22:17:41 +08:00
okxlin
e3d8e5036e
Restore valid high-risk Renovate whitelist entries
2026-06-27 17:18:50 +08:00
okxlin
ff7cf2ab9a
Prune invalid Renovate whitelist entries
2026-06-27 17:05:07 +08:00
okxlin
b061a110f8
Add stable compose apps to Renovate whitelist
2026-06-27 16:58:22 +08:00
okxlin
0f92581dcf
Add stable LinuxServer apps to Renovate whitelist
2026-06-27 07:07:10 +08:00
okxlin
bb6e75de01
Add bilingual issue templates
...
Add categorized bilingual GitHub Issue Forms for issue maintenance.\n\nPrepared by non-human automated maintenance under okxlin authorization.
2026-06-26 15:58:24 +08:00
renovate[bot]
dd3ef29864
Update actions/checkout action to v7
2026-06-23 02:28:51 +00:00
okxlin
2514311c14
Merge pull request #4171 from okxlin/renovate/actions-checkout-digest
...
Update actions/checkout digest to df4cb1c
2026-06-23 10:03:19 +08:00
renovate[bot]
6b82606c00
Update actions/checkout digest to df4cb1c
2026-06-08 03:58:51 +00:00
renovate[bot]
d832964b20
Update actions/checkout action to v6.0.3
2026-06-02 19:03:32 +00:00
okxlin and Sisyphus
405a1ebab8
Fix renovate reconcile workflow dispatch
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-06-01 15:41:34 +08:00
okxlin and Sisyphus
dfb05b1f60
add app: cpa-usage-keeper
...
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-05-07 16:42:49 +08:00
okxlin
feee75d715
feat:更新自动合并白名单应用
2026-04-26 16:05:12 +08:00
okxlin
d028d3e8ba
Merge pull request #3695 from okxlin/renovate/renovatebot-github-action-46.x
...
Update renovatebot/github-action action to v46.1.9
2026-04-20 14:54:55 +08:00
okxlin
9bde33b58b
feat:更新自动合并白名单应用
2026-04-14 23:34:44 +08:00
renovate[bot]
8398eb166f
Update renovatebot/github-action action to v46.1.9
2026-04-13 18:36:41 +00:00
okxlin
61495a078e
chore: expand renovate automerge whitelist more apps [openclaw]
2026-03-24 11:50:37 +00:00
okxlin
de55240b9f
Merge pull request #3621 from okxlin/openclaw/feature/automerge-reconcile-scan
...
feat: reconcile eligible renovate PRs for automerge
2026-03-24 19:45:27 +08:00
okxlin
d56b5566fa
refactor: reduce duplicate reconcile dispatches
2026-03-24 11:40:16 +00:00
okxlin
renovate[bot]
