feat: add UpdateCLI tracking for Codespaces dependencies

- Add updatecli manifest for yq, Docker, and GitHub CLI versions
- Update dependabot.yml to reference UpdateCLI for Codespaces deps
- Clarify port visibility is not blocking access in README
- Document that private ports work for Codespace owners

UpdateCLI will now automatically create PRs when new versions
of devcontainer dependencies are available.

Author: gounthar

.devcontainer/README.md

@@ -2,25 +2,21 @@
 
 This directory contains the GitHub Codespaces dev container configuration.
 
-## Port Visibility Issue
+## Port Visibility
 
-If port 8080 shows as **private** after creating a Codespace, you need to manually change it to **public**:
+Port 8080 may show as **private** in the PORTS panel, but this is usually not an issue - you can still access Jenkins using the forwarded URL.
 
-### Manual Steps:
+**Note:** The port visibility label in the UI can be misleading. Even when marked as "private", the Jenkins URL provided in the welcome message will work in your browser. Only change visibility to "public" if you need to share the URL with others.
+
+### Manual Steps (if needed for sharing):
 1. Open the **PORTS** panel at the bottom of VS Code (next to TERMINAL)
 2. Find port **8080** in the list
 3. **Right-click** on port 8080
 4. Select **Port Visibility** → **Public**
-5. Refresh your browser and access Jenkins
-
-### Why is this needed?
 
-The `devcontainer.json` includes `"visibility": "public"` for port 8080, but GitHub Codespaces may not always apply this setting automatically, especially:
-- On the first Codespace creation
-- If there's an organization policy
-- If the port is forwarded before the container is fully started
+### Technical Details
 
-The setup script attempts to set the port visibility automatically using the GitHub CLI, but if that fails, manual intervention is required.
+The `devcontainer.json` includes `"visibility": "public"` for port 8080, but GitHub Codespaces may not always apply this setting automatically. The setup script attempts to set visibility using the GitHub CLI, but this is optional since Codespaces authentication allows private port access.
 
 ## Files
 
@@ -40,9 +36,10 @@ After starting a tutorial with `docker compose --profile <name> up -d`:
 ## Troubleshooting
 
 **Port 8080 refuses connection:**
-- Ensure port visibility is set to **public** (see steps above)
 - Verify Jenkins is running: `docker compose ps`
 - Check logs: `docker compose logs jenkins_controller`
+- Wait 1-2 minutes for Jenkins to fully start
+- Port visibility (private/public) should not affect access for the Codespace owner
 
 **Welcome message not showing:**
 - Run: `source ~/.bashrc` in your terminal

.github/dependabot.yml

@@ -4,7 +4,8 @@
 version: 2
 # Note: GitPod support is legacy (free tier sunset). Migrated to GitHub Codespaces.
 # Codespaces uses devcontainer.json which Dependabot cannot monitor (not a Dockerfile).
-# Manual updates for mcr.microsoft.com/devcontainers/base:ubuntu-24.04 as needed.
+# Codespaces dependencies (yq, devcontainer features) are tracked by UpdateCLI.
+# See updatecli/updatecli.d/codespaces.yaml for automated updates.
 
 # Enable version updates for GitHub Actions workflows
 updates:

updatecli/updatecli.d/codespaces.yaml

@@ -0,0 +1,104 @@
+---
+name: 'deps(codespaces): bump devcontainer dependencies'
+
+scms:
+  default:
+    kind: github
+    spec:
+      user: "{{ .github.user }}"
+      email: "{{ .github.email }}"
+      owner: "{{ .github.owner }}"
+      repository: "{{ .github.repository }}"
+      token: "{{ requiredEnv .github.token }}"
+      username: "{{ .github.username }}"
+      branch: "{{ .github.branch }}"
+
+sources:
+  yq:
+    name: Get latest yq release
+    kind: githubrelease
+    spec:
+      owner: mikefarah
+      repository: yq
+      token: "{{ requiredEnv .github.token }}"
+      typefilter:
+        latest: true
+    transformers:
+      - trimprefix: "v"
+
+  docker-version:
+    name: Get latest Docker stable version
+    kind: githubrelease
+    spec:
+      owner: moby
+      repository: moby
+      token: "{{ requiredEnv .github.token }}"
+      typefilter:
+        latest: true
+    transformers:
+      - trimprefix: "v"
+      - findsubmatch:
+          pattern: '^(\d+\.\d+)\.\d+$'
+          captureindex: 1
+
+  github-cli:
+    name: Get latest GitHub CLI release
+    kind: githubrelease
+    spec:
+      owner: cli
+      repository: cli
+      token: "{{ requiredEnv .github.token }}"
+      typefilter:
+        latest: true
+    transformers:
+      - trimprefix: "v"
+
+conditions:
+  dockerhub-image-exists:
+    name: Check if Docker version is available in devcontainer feature
+    kind: dockerimage
+    spec:
+      # The devcontainer feature uses standard docker versions
+      image: docker
+      tag: '{{ source "docker-version" }}'
+
+targets:
+  yq-setup-script:
+    name: '[.devcontainer/setup.sh] Bump yq version'
+    kind: file
+    scmid: default
+    sourceid: yq
+    spec:
+      file: .devcontainer/setup.sh
+      matchpattern: '(YQ_VERSION="\$\{YQ_VERSION:-v)([^"]+)(".*)'
+      replacepattern: '${1}{{ source "yq" }}${3}'
+
+  docker-feature-version:
+    name: '[.devcontainer/devcontainer.json] Bump Docker version'
+    kind: file
+    scmid: default
+    sourceid: docker-version
+    spec:
+      file: .devcontainer/devcontainer.json
+      matchpattern: '("ghcr\.io/devcontainers/features/docker-in-docker:2":\s*\{\s*"version":\s*")([^"]+)(".*)'
+      replacepattern: '${1}{{ source "docker-version" }}${3}'
+
+  github-cli-feature-version:
+    name: '[.devcontainer/devcontainer.json] Bump GitHub CLI version'
+    kind: file
+    scmid: default
+    sourceid: github-cli
+    spec:
+      file: .devcontainer/devcontainer.json
+      matchpattern: '("ghcr\.io/devcontainers/features/github-cli:1":\s*\{\s*"version":\s*")([^"]+)(".*)'
+      replacepattern: '${1}{{ source "github-cli" }}${3}'
+
+actions:
+  default:
+    kind: github/pullrequest
+    scmid: default
+    title: 'chore(deps): update Codespaces dependencies'
+    spec:
+      labels:
+        - dependencies
+        - codespaces