Skip to content

ci: let Renovate update PREK_VERSION - #8

Merged
robinbowes merged 1 commit into
mainfrom
ci/renovate-prek-version
Oct 16, 2026
Merged

robinbowes merged 1 commit into
mainfrom
ci/renovate-prek-version

Conversation

@robinbowes

Copy link
Copy Markdown

Gives the Lint job's prek version an updater. Dependabot does not read an action's with: inputs.

  • ci.yml: the Lint step now reads its prek version from env: PREK_VERSION: 0.5.5, annotated with # renovate: datasource=github-releases depName=j178/prek extractVersion=^v(?<version>.+)$, and passes prek-version: ${{ env.PREK_VERSION }}. This matches yo61/global and python-template.
  • renovate.json5: the shared policy block copied from yo61/infrastructure and yo61/global (those two are identical), with customManagers:githubActionsVersions and enabledManagers: ["custom.regex"].

Differences from global's renovate.json5:

  • enabledManagers is ["custom.regex"], without github-actions. Here Dependabot owns action SHAs, npm, docker and pre-commit hooks. The runs-on: ubuntu-latest labels are left for a separate change, so Renovate has no runner image to own yet.
  • The packageRules entry that disables github-actions for every datasource but github-runners is dropped. It does nothing when that manager is not enabled.
  • The header comment describes this repository's split.

Verified:

  • renovate-config-validator --strict (renovate@44.164.6) passes.
  • A local --platform=local extract with this config finds exactly one dependency: j178/prek 0.5.5 (github-releases) in ci.yml.
  • jactionlint exits 0. Removing the Lint job's timeout-minutes makes the hook fail (missing-timeout). prek run --all-files passes.

yo61/infrastructure adds this repository to RENOVATE_TARGETS in a follow-up, after this merges. RENOVATE_REQUIRE_CONFIG is required, so the config has to land first.

Linear: GLB-32

🤖 Generated with Claude Code

Move the Lint job's prek version into an annotated PREK_VERSION env, as
in yo61/global and python-template, and add a renovate.json5 so the
self-hosted Renovate in yo61/infrastructure keeps it. Renovate runs only
custom.regex here: Dependabot keeps action SHAs, npm, docker and
pre-commit hooks, so each pin has one owner.

Refs GLB-32

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@robinbowes
robinbowes merged commit 0e32bc2 into main Oct 16, 2026
5 checks passed
@robinbowes
robinbowes deleted the ci/renovate-prek-version branch October 16, 2026 07:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant