Skip to content

Commit 64c9b49

Browse files
author
kranurag7
committed
add renovate for bumping dependencies
we want to use renovate for updating the dependencies in this repo. This commit adds renovate to this repo. update only patch kubernetes dependencies We should only update patch updates using renovate and minor one should be handled manually. terminate file with an extra line also udpates yamllint and all other yaml files. Signed-off-by: kranurag7 <[email protected]>
1 parent 061cd76 commit 64c9b49

File tree

14 files changed

+314
-7
lines changed

14 files changed

+314
-7
lines changed

‎.github/renovate.json5‎

Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
{
2+
extends: [
3+
":dependencyDashboard",
4+
":semanticPrefixFixDepsChoreOthers",
5+
":autodetectRangeStrategy",
6+
":disableRateLimiting",
7+
":semanticCommits",
8+
"helpers:pinGitHubActionDigests",
9+
"github>whitesource/merge-confidence:beta",
10+
"github>SovereignCloudStack/cluster-stack-operator//.github/renovate/commitMessage.json5",
11+
"github>SovereignCloudStack/cluster-stack-operator//.github/renovate/approval.json5",
12+
"github>SovereignCloudStack/cluster-stack-operator//.github/renovate/golang.json5",
13+
"github>SovereignCloudStack/cluster-stack-operator//.github/renovate/groups.json5",
14+
"github>SovereignCloudStack/cluster-stack-operator//.github/renovate/labels.json5",
15+
"github>SovereignCloudStack/cluster-stack-operator//.github/renovate/regexManagers.json5"
16+
],
17+
platform: "github",
18+
baseBranches: ["main"],
19+
onboarding: false,
20+
requireConfig: "ignored",
21+
timezone: "Europe/Berlin",
22+
// repo config
23+
repositories: ["SovereignCloudStack/cluster-stack-operator"],
24+
ignorePaths: [
25+
"**/vendor/**",
26+
"**/test/**",
27+
"**/tests/**"
28+
],
29+
username: "cluster-stack-bot[bot]",
30+
gitAuthor: "cluster-stack-bot[bot] <143188378+cluster-stack-bot[bot]@users.noreply.github.com>",
31+
// PR config
32+
dependencyDashboardTitle: "Dependency Dashboard 🤖",
33+
dependencyDashboardHeader: "",
34+
prFooter: "",
35+
suppressNotifications: ["prIgnoreNotification"],
36+
rebaseWhen: "conflicted",
37+
commitBodyTable: true,
38+
prHourlyLimit: 1,
39+
printConfig: true,
40+
pruneStaleBranches: true,
41+
allowPostUpgradeCommandTemplating: true,
42+
separateMajorMinor: true,
43+
separateMultipleMajor: true,
44+
separateMinorPatch: true,
45+
enabledManagers: ["dockerfile", "gomod", "github-actions", "regex"],
46+
recreateClosed: true,
47+
}

‎.github/renovate/approval.json5‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
{
2+
packageRules: [
3+
{
4+
matchUpdateTypes: ["major", "minor"],
5+
matchManagers: ["gomod"],
6+
matchDepTypes: ["golang"],
7+
description: "Ask for approval for golang updates",
8+
dependencyDashboardApproval: true,
9+
},
10+
],
11+
}

‎.github/renovate/commitMessage.json5‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
{
2+
"commitMessagePrefix": ":seedling: ",
3+
"commitMessageTopic": "{{depName}}",
4+
"commitMessageExtra": "to {{newVersion}}",
5+
"commitMessageSuffix": "",
6+
"group": { commitMessageTopic: "{{{groupName}}} group" },
7+
"packageRules": [
8+
{
9+
"matchDatasources": ["helm"],
10+
"commitMessageTopic": "chart {{depName}}"
11+
},
12+
{
13+
"matchDatasources": ["docker"],
14+
"commitMessageTopic": "image {{depName}}",
15+
"commitMessageExtra": "to {{#if isSingleVersion}}v{{{newVersion}}}{{else}}{{{newValue}}}{{/if}}"
16+
}
17+
]
18+
}

‎.github/renovate/golang.json5‎

Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
{
2+
golang: {
3+
postUpdateOptions: ["gomodTidy", "gomodUpdateImportPaths"],
4+
},
5+
// https://docs.renovatebot.com/configuration-options/#constraints
6+
"constraints": {
7+
"go": "1.21"
8+
},
9+
packageRules: [
10+
{
11+
description: "Disable Golang update for major and minor versions",
12+
matchManagers: ["dockerfile"],
13+
matchDepNames: ["docker.io/library/golang"],
14+
matchUpdateTypes: ["major", "minor"],
15+
enabled: false,
16+
},
17+
{
18+
description: "Disable slim-sprig",
19+
matchManagers: ["gomod"],
20+
matchDepNames: ["github.com/go-task/slim-sprig"],
21+
matchPaths: ["hack/tools/**"],
22+
enabled: false,
23+
},
24+
{
25+
description: "Disable update controller-tools",
26+
matchManagers: ["gomod"],
27+
matchDepNames: ["sigs.k8s.io/controller-runtime", "sigs.k8s.io/controller-tools", "github.com/google/go-github/v52"],
28+
matchUpdateTypes: ["major", "minor"],
29+
enabled: false,
30+
},
31+
{
32+
description: "Disable update k8s packages",
33+
matchManagers: ["gomod"],
34+
matchDepNames: ["k8s.io/api", "k8s.io/apimachinery", "k8s.io/apiserver", "k8s.io/client-go", "k8s.io/kubectl", "k8s.io/code-generator"],
35+
matchUpdateTypes: ["patch"],
36+
enabled: true,
37+
},
38+
{
39+
description: "Disable update cluster-api",
40+
matchManagers: ["gomod"],
41+
matchDepNames: ["sigs.k8s.io/cluster-api", "sigs.k8s.io/cluster-api/test", "sigs.k8s.io/cluster-api/hack/tools"],
42+
enabled: false,
43+
},
44+
],
45+
}

‎.github/renovate/groups.json5‎

Lines changed: 78 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,78 @@
1+
{
2+
packageRules: [
3+
{
4+
description: "Update Builder Image",
5+
groupName: "Builder Image",
6+
groupSlug: "cso-builder-image",
7+
commitMessageTopic: "Builder Image group",
8+
matchPaths: ["images/builder/**"],
9+
separateMajorMinor: false,
10+
separateMultipleMajor: false,
11+
separateMinorPatch: false,
12+
schedule: ["on the first day of the month"],
13+
},
14+
{
15+
description: "Update Cso Image",
16+
groupName: "Cso Image",
17+
matchManagers: ["dockerfile", "regex"],
18+
separateMajorMinor: false,
19+
separateMultipleMajor: false,
20+
separateMinorPatch: false,
21+
matchPaths: ["images/cso/**"],
22+
commitMessageTopic: "Cso Image group",
23+
groupSlug: "cso-manager-image",
24+
schedule: ["on monday"],
25+
},
26+
{
27+
description: "Update Makefile",
28+
groupName: "Makefile",
29+
matchManagers: ["regex"],
30+
separateMajorMinor: false,
31+
separateMultipleMajor: false,
32+
separateMinorPatch: false,
33+
matchFiles: ["Makefile"],
34+
commitMessageTopic: "Makefile group",
35+
groupSlug: "makefile",
36+
},
37+
{
38+
description: "Update Github Actions",
39+
groupName: "github-actions",
40+
matchManagers: ["github-actions"],
41+
matchUpdateTypes: ["major", "minor", "patch", "digest", "pin", "pinDigest"],
42+
pinDigests: true,
43+
commitMessageTopic: "Github Actions group",
44+
groupSlug: "github-actions",
45+
schedule: ["on monday"],
46+
},
47+
{
48+
description: "Update Bot Schedule",
49+
matchManagers: ["github-actions"],
50+
matchUpdateTypes: ["major", "minor", "patch"],
51+
matchPackageNames: ["renovatebot/github-action"],
52+
schedule: ["on the first day of the month"],
53+
},
54+
{
55+
description: "Update Go Dev Dependencies",
56+
groupName: "Update Go Dev Dependencies",
57+
matchManagers: ["gomod"],
58+
matchPaths: ["hack/tools/**"],
59+
commitMessageTopic: "Go Dev Dependencies group",
60+
groupSlug: "golang-devs-deps",
61+
},
62+
{
63+
description: "Update Golang Dependencies",
64+
groupName: "Update Golang Dependencies",
65+
matchManagers: ["gomod"],
66+
ignorePaths: ["hack/tools/**"],
67+
commitMessageTopic: "Golang Dependencies group",
68+
groupSlug: "golang-deps",
69+
},
70+
{
71+
description: "disable update of cso builder image",
72+
matchManagers: ["github-actions"],
73+
matchUpdateTypes: ["major", "minor", "patch"],
74+
matchPackageNames: ["ghcr.io/sovereigncloudstack/cso-builder"],
75+
enabled: false,
76+
},
77+
]
78+
}

‎.github/renovate/labels.json5‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
{
2+
"packageRules": [
3+
{
4+
"matchUpdateTypes": ["major"],
5+
"labels": ["type/major"]
6+
},
7+
{
8+
"matchUpdateTypes": ["minor"],
9+
"labels": ["type/minor"]
10+
},
11+
{
12+
"matchUpdateTypes": ["patch"],
13+
"labels": ["type/patch"]
14+
},
15+
{
16+
"matchDatasources": ["helm"],
17+
"addLabels": ["update/helm"]
18+
},
19+
{
20+
"matchDatasources": ["docker"],
21+
"addLabels": ["update/container"]
22+
},
23+
{
24+
"matchManagers": ["github-actions"],
25+
"addLabels": ["update/github-action"]
26+
},
27+
{
28+
"matchDatasources": ["go"],
29+
"addLabels": ["update/go"]
30+
}
31+
]
32+
}

‎.github/renovate/regexManagers.json5‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
{
2+
"regexManagers": [
3+
{
4+
"fileMatch": [".yaml$", ".yml$", "Makefile", "(^|/|\.)Dockerfile$", "(^|/)Dockerfile[^/]*$"],
5+
"matchStrings": [
6+
".*(@|=|==|:\\s)(?<currentValue>[v0-9.-]+)\\s#\\supdate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)( extractVersion=(?<extractVersion>.+?))?( versioning=(?<versioning>.*?))?\\s"
7+
],
8+
"extractVersionTemplate":"{{#if extractVersion}}{{{extractVersion}}}{{/if}}",
9+
"versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver{{/if}}"
10+
},
11+
{
12+
"fileMatch": ["(^|/|\.)Dockerfile$", "(^|/)Dockerfile[^/]*$"],
13+
"matchStrings": [
14+
"#\\s*update:\\s*datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\sENV .*?_VERSION=\"(?<currentValue>.*)\"\\s"
15+
],
16+
"versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver{{/if}}"
17+
},
18+
]
19+
}

‎.github/workflows/schedule-update-bot.yaml‎

Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,57 @@
1+
name: Schedule - Update Bot
2+
on: # yamllint disable-line rule:truthy
3+
workflow_dispatch:
4+
inputs:
5+
dryRun:
6+
description: "Dry-Run"
7+
default: "false"
8+
required: false
9+
logLevel:
10+
description: "Log-Level"
11+
default: "debug"
12+
required: false
13+
schedule:
14+
- cron: "0 11 * * *"
15+
push:
16+
branches:
17+
- main
18+
paths:
19+
- ".github/renovate.json5"
20+
- ".github/renovate/**.json5"
21+
env:
22+
LOG_LEVEL: info
23+
DRY_RUN: false
24+
RENOVATE_CONFIG_FILE: .github/renovate.json5
25+
# yamllint disable rule:line-length
26+
jobs:
27+
update-bot:
28+
if: github.repository == 'SovereignCloudStack/cluster-stack-operator'
29+
name: Renovate
30+
runs-on: ubuntu-latest
31+
steps:
32+
- name: Checkout
33+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
34+
35+
- name: Generate Token
36+
uses: actions/create-github-app-token@f4c6bf6752984b3a29fcc135a5e70eb792c40c6b # v1
37+
id: generate-token
38+
with:
39+
app-id: ${{ secrets.SCS_APP_ID }}
40+
private-key: ${{ secrets.SCS_APP_PRIVATE_KEY }}
41+
42+
- name: Override default config from dispatch variables
43+
run: |
44+
echo "DRY_RUN=${{ github.event.inputs.dryRun || env.DRY_RUN }}" >> "$GITHUB_ENV"
45+
echo "LOG_LEVEL=${{ github.event.inputs.logLevel || env.LOG_LEVEL }}" >> "$GITHUB_ENV"
46+
47+
- name: Renovate
48+
uses: renovatebot/github-action@f9c81dddc9b589e4e6ae0326d1e36f6bc415d230 # v39.2.4
49+
env:
50+
RENOVATE_HOST_RULES: '[{"hostType": "docker", "matchHost": "ghcr.io", "username": "${{ github.actor }}", "password": "${{ secrets.GITHUB_TOKEN }}" }]'
51+
RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS: '[".*"]'
52+
BUILDER_IMAGE: 'ghcr.io/sovereigncloudstack/cso'
53+
RENOVATE_POST_UPGRADE_TASKS: '{ commands: ["BUILD_IMAGE_TOKEN=${{ secrets.GITHUB_TOKEN }} BUILD_IMAGE_USER=${{ github.actor }} CI=true ./hack/upgrade-builder-image.sh"], fileFilters: ["Makefile", ".github/**/*.yml", ".github/**/*.yaml"], executionMode: "branch"}'
54+
with:
55+
configurationFile: ${{ env.RENOVATE_CONFIG_FILE }}
56+
token: "x-access-token:${{ steps.generate-token.outputs.token }}"
57+
mount-docker-socket: "true"

‎.github/workflows/test.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -64,4 +64,4 @@ jobs:
6464
GIT_REPOSITORY_NAME: cluster-stacks
6565
GO111MODULE: "on"
6666
GIT_ACCESS_TOKEN: ${{ secrets.GIT_ACCESS_TOKEN }}
67-
run: make test-integration-workloadcluster
67+
run: make test-integration-workloadcluster

‎.hadolint.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,4 @@ ignored: []
44
no-color: false
55
no-fail: false
66
strict-labels: false
7-
disable-ignore-pragma: false
7+
disable-ignore-pragma: false

0 commit comments

Comments
 (0)