fix(renovate): track OCI Helm charts and non-Nix dependencies #21

Merged

Sammy merged 1 commit from fix/renovate-non-nix-dependencies into main

2026-10-15 03:36:53 +00:00

Sammy commented

2026-10-15 03:36:11 +00:00

Owner

Renovate detected the Forgejo OCI Helm chart but rejected 17.1.x using Docker versioning, so it skipped chart upgrades. Use Helm versioning for OCI charts and propose explicit Helm version pins. A local lookup now detects Forgejo chart updates (currently through 17.3.0).

Expand coverage to container images in JSON patches, OpenClaw custom-resource images and npm plugins, and pinned CLI installers. Keep OpenClaw image/plugin updates grouped. Update CLI versions, paths, cache markers, and GitHub asset checksums together; Tea verifies the checksum published with its selected release. Derive the installed Go cache marker from the image's Go version so image updates take effect.

Explicitly disable Nix dependency updates, ignore Nix/encrypted files, and skip Nix store image references. Pin floating container tags by digest.

Validation: strict Renovate config validation; local extraction/lookup dry run; actual Renovate extraction and replacement checks for all five CLI installers; git diff --check. GitHub asset lookups require the bot's configured GitHub token, which was not loaded into the local dry run. No dependency upgrades or deployments are included.

Version investigation: the live Forgejo server reported 15.0.9; upstream chart 17.3.0 specifies application 15.0.10. The reported requirement for Forgejo 18 CI-log routes has not been substantiated by this change.

Renovate detected the Forgejo OCI Helm chart but rejected `17.1.x` using Docker versioning, so it skipped chart upgrades. Use Helm versioning for OCI charts and propose explicit Helm version pins. A local lookup now detects Forgejo chart updates (currently through 17.3.0). Expand coverage to container images in JSON patches, OpenClaw custom-resource images and npm plugins, and pinned CLI installers. Keep OpenClaw image/plugin updates grouped. Update CLI versions, paths, cache markers, and GitHub asset checksums together; Tea verifies the checksum published with its selected release. Derive the installed Go cache marker from the image's Go version so image updates take effect. Explicitly disable Nix dependency updates, ignore Nix/encrypted files, and skip Nix store image references. Pin floating container tags by digest. Validation: strict Renovate config validation; local extraction/lookup dry run; actual Renovate extraction and replacement checks for all five CLI installers; git diff --check. GitHub asset lookups require the bot's configured GitHub token, which was not loaded into the local dry run. No dependency upgrades or deployments are included. Version investigation: the live Forgejo server reported 15.0.9; upstream chart 17.3.0 specifies application 15.0.10. The reported requirement for Forgejo 18 CI-log routes has not been substantiated by this change.

Sammy added 1 commit

2026-10-15 03:36:12 +00:00