Commit Graph
130 Commits
Author SHA1 Message Date
renovate[bot] a228df3a9b Update renovatebot/github-action action to v46.1.19 2026-07-13 02:32:18 +00:00
okxlin ad95d14bec Tighten Renovate multi-service safeguards (#4769) 2026-07-12 16:23:35 +08:00
okxlin 3203b67f4e Retire uninstallable legacy apps (#4768) 2026-07-12 16:04:14 +08:00
okxlin 6425fca696 Use official WuKongIM image sources (#4764) 2026-07-12 15:36:32 +08:00
okxlin 13acebf9c4 Make Mend primary for Compose updates (#4761) 2026-07-12 15:06:20 +08:00
okxlin fe97d6f2c8 Improve Renovate rate-limit recovery (#4760) 2026-07-12 14:38:44 +08:00
okxlin 9a49d3898b Add a Docker Hub credential preflight
Validate the configured Docker Hub credentials against the token service and a public manifest before starting a full Renovate scan. Provide a small manual workflow so maintainers can diagnose authentication without consuming a full scan.
2026-07-12 11:09:58 +08:00
okxlin d26004a6ca Harden Renovate caching and digest versioning
Strip image digests before deriving app directory versions, while continuing to reject digest-only images. Document the cache privacy boundary, restrict the workflow token to read-only, and bound full scans to 90 minutes.
2026-07-12 10:36:01 +08:00
okxlin de60c0882d Persist the self-hosted Renovate cache
Restore and save Renovate's public lookup and repository extraction cache with a SHA-pinned GitHub action. Keep private package caching disabled and report cache growth for quota monitoring.
2026-07-12 10:06:21 +08:00
okxlin 3f3057ef05 Isolate hosted and self-hosted Renovate controllers
Give the Mend App and the self-hosted Docker scanner disjoint manager scopes, branch namespaces, and dependency dashboards so they cannot close each other's PRs. Preserve the existing Compose policy in a dedicated config and document the scaling boundary.
2026-07-12 09:54:43 +08:00
okxlin 10aab1cce5 Harden Renovate application tracks (#4744) 2026-07-12 03:16:50 +08:00
okxlin f786a72d66 Recognize self-hosted Renovate PRs (#4743) 2026-07-12 03:09:21 +08:00
okxlin 17adfea361 Reduce full Renovate scan frequency (#4731) 2026-07-12 02:49:15 +08:00
okxlin 55e4ad13e3 Explain missing Renovate registry auth (#4730) 2026-07-12 02:19:37 +08:00
okxlin a3c5f371c5 Require Docker Hub auth for Renovate (#4729) 2026-07-12 02:16:01 +08:00
okxlin ac0a4afc3c Fail incomplete Renovate runs (#4728) 2026-07-12 01:45:57 +08:00
okxlin 50fb8bc855 Fix self-hosted Renovate repository target (#4727)
Explicitly target the current repository so green Renovate runs perform real dependency scanning.
2026-07-12 00:58:25 +08:00
okxlin 305513a4e9 Fix Renovate version selection for multi-service apps (#4726)
Use changed primary service tags for app directory renames and keep paused Flux Panel releases pinned to 1.4.3.
2026-07-12 00:41:12 +08:00
okxlin 0ad17202a7 chore(renovate): whitelist roundcube and rustdesk-linuxserver 2026-07-07 01:52:24 +08:00
okxlin 0e2718e124 Merge pull request #4582 from okxlin/renovate/renovatebot-github-action-46.x
Update renovatebot/github-action action to v46.1.18
2026-07-07 00:24:25 +08:00
renovate[bot] 0c29ff98ec Update renovatebot/github-action action to v46.1.18 2026-07-06 14:13:39 +00:00
okxlin eb2fb67377 chore(renovate): whitelist darktable-linuxserver 2026-07-06 22:10:34 +08:00
okxlin 93752f2ff5 chore(renovate): whitelist ungoogled-chromium-linuxserver 2026-07-06 00:19:14 +08:00
okxlin 9982573c85 Soften upgrade-script whitelist heuristic (#4529) 2026-07-04 22:04:40 +08:00
okxlin 24946bc4a7 Document Renovate whitelist admission policy (#4528) 2026-07-04 21:57:43 +08:00
okxlin 1002207f11 Whitelist azahar-linuxserver for Renovate automerge (#4527) 2026-07-04 21:43:07 +08:00
okxlin d441193fcd workflow: fix renovate app-version false failures
- run the update-app-version workflow only for Renovate pushes or manual dispatch
- skip already-renamed version directories and rolling aliases in the rename helper
- keep follow-up maintainer patches on Renovate branches from tripping the version rename workflow
2026-07-04 20:29:47 +08:00
okxlin a89df356da ci(renovate): close sidecar-only bot prs 2026-07-03 21:12:38 +08:00
okxlin 10d379b854 Broaden Renovate automerge coverage
Use PR file metadata for the single-service gate so stale but otherwise clean Renovate branches are classified from their actual patch set.

Also whitelist additional single-service apps that match the direct-merge policy and passed the image-only gate.
2026-07-03 20:27:48 +08:00
okxlin fb98a2bd57 Fix Renovate automerge workflow gating
Use the built-in GitHub token for internal workflow dispatches so reconcile can trigger downstream runs without PAT scope mismatches.

Also make the automerge gate inspect the actual base/head git diff, tolerate version-directory renames, and treat ineligible PRs as a skipped gate instead of a failed workflow run.
2026-07-03 20:15:41 +08:00
okxlin cc190ed341 Improve Renovate gate for multi-variant apps
- allow one app to update multiple single-service compose variants

- document Wavelog version guidance and security caution
2026-07-01 19:58:41 +08:00
okxlin 422c25d102 Whitelist safe LinuxServer image-only updates 2026-07-01 19:46:13 +08:00
okxlin 1d9f8284aa Harden Renovate automerge gate 2026-06-30 22:17:41 +08:00
okxlin e3d8e5036e Restore valid high-risk Renovate whitelist entries 2026-06-27 17:18:50 +08:00
okxlin ff7cf2ab9a Prune invalid Renovate whitelist entries 2026-06-27 17:05:07 +08:00
okxlin b061a110f8 Add stable compose apps to Renovate whitelist 2026-06-27 16:58:22 +08:00
okxlin 0f92581dcf Add stable LinuxServer apps to Renovate whitelist 2026-06-27 07:07:10 +08:00
okxlin bb6e75de01 Add bilingual issue templates
Add categorized bilingual GitHub Issue Forms for issue maintenance.\n\nPrepared by non-human automated maintenance under okxlin authorization.
2026-06-26 15:58:24 +08:00
renovate[bot] dd3ef29864 Update actions/checkout action to v7 2026-06-23 02:28:51 +00:00
okxlin 2514311c14 Merge pull request #4171 from okxlin/renovate/actions-checkout-digest
Update actions/checkout digest to df4cb1c
2026-06-23 10:03:19 +08:00
renovate[bot] 6b82606c00 Update actions/checkout digest to df4cb1c 2026-06-08 03:58:51 +00:00
renovate[bot] d832964b20 Update actions/checkout action to v6.0.3 2026-06-02 19:03:32 +00:00
okxlinandSisyphus 405a1ebab8 Fix renovate reconcile workflow dispatch
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
2026-06-01 15:41:34 +08:00
okxlinandSisyphus dfb05b1f60 add app: cpa-usage-keeper
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
2026-05-07 16:42:49 +08:00
okxlin feee75d715 feat:更新自动合并白名单应用 2026-04-26 16:05:12 +08:00
okxlin d028d3e8ba Merge pull request #3695 from okxlin/renovate/renovatebot-github-action-46.x
Update renovatebot/github-action action to v46.1.9
2026-04-20 14:54:55 +08:00
okxlin 9bde33b58b feat:更新自动合并白名单应用 2026-04-14 23:34:44 +08:00
renovate[bot] 8398eb166f Update renovatebot/github-action action to v46.1.9 2026-04-13 18:36:41 +00:00
okxlin 61495a078e chore: expand renovate automerge whitelist more apps [openclaw] 2026-03-24 11:50:37 +00:00
okxlin de55240b9f Merge pull request #3621 from okxlin/openclaw/feature/automerge-reconcile-scan
feat: reconcile eligible renovate PRs for automerge
2026-03-24 19:45:27 +08:00