From a3b0979ad9fbbd111f4e86d400fe8748e723e390 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Tue, 7 Oct 2025 20:44:19 +0200 Subject: [PATCH 01/19] Add Renovate workflow configuration --- .github/workflows/renovate.yml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 .github/workflows/renovate.yml diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml new file mode 100644 index 0000000..af8c7f8 --- /dev/null +++ b/.github/workflows/renovate.yml @@ -0,0 +1,27 @@ + +on: + workflow_dispatch: + inputs: + debug: + description: "Enable debug logging" + type: boolean + required: false + default: false + schedule: + - cron: "0 0 * * 1" # Triggers the workflow every Monday at midnight +jobs: + renovate: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v5.0.0 + - name: Self-hosted Renovate + uses: renovatebot/github-action@v43.0.15 + with: + token: ${{ secrets.RENOVATE_TOKEN }} + LOG_LEVEL: ${{ inputs.DEBUG == 'true' && 'debug' || 'info' }} + RENOVATE_COMMIT_MESSAGE_SUFFIX: '{{#unless groupName}}{{#if (equals updateType "digest")}}(from {{currentDigestShort}}){{else}}(from {{currentVersion}}){{/if}}{{/unless}}' + RENOVATE_LABELS: "['dependencies']" + RENOVATE_DEPENDENCY_DASHBOARD_LABELS: "['dependencies']" + RENOVATE_EXTENDS: '["config:best-practices","mergeConfidence:all-badges",":pinVersions","security:openssf-scorecard",":prHourlyLimitNone",":separateMultipleMajorReleases",":configMigration"]' + RENOVATE_PLATFORM: "github" From f1f1cbde940260c682e09810c49833a19e6bf462 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Tue, 7 Oct 2025 20:51:55 +0200 Subject: [PATCH 02/19] Add missing env declaration for Renovate job --- .github/workflows/renovate.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index af8c7f8..fc2d62b 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -19,6 +19,7 @@ jobs: uses: renovatebot/github-action@v43.0.15 with: token: ${{ secrets.RENOVATE_TOKEN }} + env: LOG_LEVEL: ${{ inputs.DEBUG == 'true' && 'debug' || 'info' }} RENOVATE_COMMIT_MESSAGE_SUFFIX: '{{#unless groupName}}{{#if (equals updateType "digest")}}(from {{currentDigestShort}}){{else}}(from {{currentVersion}}){{/if}}{{/unless}}' RENOVATE_LABELS: "['dependencies']" From 8d3c04c6f2e31845655b3b00dafdf9f5b7c291ab Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Tue, 7 Oct 2025 20:52:25 +0200 Subject: [PATCH 03/19] Add RENOVATE_REPOSITORIES environment variable to Renovate job --- .github/workflows/renovate.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index fc2d62b..fcfee5f 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -19,8 +19,9 @@ jobs: uses: renovatebot/github-action@v43.0.15 with: token: ${{ secrets.RENOVATE_TOKEN }} - env: + env: LOG_LEVEL: ${{ inputs.DEBUG == 'true' && 'debug' || 'info' }} + RENOVATE_REPOSITORIES: "['${{ github.repository }}']" RENOVATE_COMMIT_MESSAGE_SUFFIX: '{{#unless groupName}}{{#if (equals updateType "digest")}}(from {{currentDigestShort}}){{else}}(from {{currentVersion}}){{/if}}{{/unless}}' RENOVATE_LABELS: "['dependencies']" RENOVATE_DEPENDENCY_DASHBOARD_LABELS: "['dependencies']" From ccb7188d9da0779e7329e2d3276989158d7f91d8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Tue, 7 Oct 2025 20:52:50 +0200 Subject: [PATCH 04/19] Fix workflow name indentation in Renovate configuration --- .github/workflows/renovate.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index fcfee5f..30b53cf 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -1,4 +1,4 @@ - +name: "Renovate" on: workflow_dispatch: inputs: From 89b299c1277d0855d29ce006183c90d2fc1e4a0b Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 7 Oct 2025 18:54:16 +0000 Subject: [PATCH 05/19] Add renovate.json --- renovate.json | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 renovate.json diff --git a/renovate.json b/renovate.json new file mode 100644 index 0000000..7190a60 --- /dev/null +++ b/renovate.json @@ -0,0 +1,3 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json" +} From edd2a03f91a6c4bd61128495e3dfebc5160a78d5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Tue, 7 Oct 2025 20:44:19 +0200 Subject: [PATCH 06/19] Add Renovate workflow configuration --- .github/workflows/renovate.yml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 .github/workflows/renovate.yml diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml new file mode 100644 index 0000000..af8c7f8 --- /dev/null +++ b/.github/workflows/renovate.yml @@ -0,0 +1,27 @@ + +on: + workflow_dispatch: + inputs: + debug: + description: "Enable debug logging" + type: boolean + required: false + default: false + schedule: + - cron: "0 0 * * 1" # Triggers the workflow every Monday at midnight +jobs: + renovate: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v5.0.0 + - name: Self-hosted Renovate + uses: renovatebot/github-action@v43.0.15 + with: + token: ${{ secrets.RENOVATE_TOKEN }} + LOG_LEVEL: ${{ inputs.DEBUG == 'true' && 'debug' || 'info' }} + RENOVATE_COMMIT_MESSAGE_SUFFIX: '{{#unless groupName}}{{#if (equals updateType "digest")}}(from {{currentDigestShort}}){{else}}(from {{currentVersion}}){{/if}}{{/unless}}' + RENOVATE_LABELS: "['dependencies']" + RENOVATE_DEPENDENCY_DASHBOARD_LABELS: "['dependencies']" + RENOVATE_EXTENDS: '["config:best-practices","mergeConfidence:all-badges",":pinVersions","security:openssf-scorecard",":prHourlyLimitNone",":separateMultipleMajorReleases",":configMigration"]' + RENOVATE_PLATFORM: "github" From ba134da03800e933d08f07d21b14dd44c798771d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Tue, 7 Oct 2025 20:51:55 +0200 Subject: [PATCH 07/19] Add missing env declaration for Renovate job --- .github/workflows/renovate.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index af8c7f8..fc2d62b 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -19,6 +19,7 @@ jobs: uses: renovatebot/github-action@v43.0.15 with: token: ${{ secrets.RENOVATE_TOKEN }} + env: LOG_LEVEL: ${{ inputs.DEBUG == 'true' && 'debug' || 'info' }} RENOVATE_COMMIT_MESSAGE_SUFFIX: '{{#unless groupName}}{{#if (equals updateType "digest")}}(from {{currentDigestShort}}){{else}}(from {{currentVersion}}){{/if}}{{/unless}}' RENOVATE_LABELS: "['dependencies']" From 11cc0eb9f9e435ef3bdd8363331043e0a8630a7f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Tue, 7 Oct 2025 20:52:25 +0200 Subject: [PATCH 08/19] Add RENOVATE_REPOSITORIES environment variable to Renovate job --- .github/workflows/renovate.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index fc2d62b..fcfee5f 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -19,8 +19,9 @@ jobs: uses: renovatebot/github-action@v43.0.15 with: token: ${{ secrets.RENOVATE_TOKEN }} - env: + env: LOG_LEVEL: ${{ inputs.DEBUG == 'true' && 'debug' || 'info' }} + RENOVATE_REPOSITORIES: "['${{ github.repository }}']" RENOVATE_COMMIT_MESSAGE_SUFFIX: '{{#unless groupName}}{{#if (equals updateType "digest")}}(from {{currentDigestShort}}){{else}}(from {{currentVersion}}){{/if}}{{/unless}}' RENOVATE_LABELS: "['dependencies']" RENOVATE_DEPENDENCY_DASHBOARD_LABELS: "['dependencies']" From c653f8a3d6ad1d3f9f808c54c9dbaa3e150fa6ca Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Tue, 7 Oct 2025 20:52:50 +0200 Subject: [PATCH 09/19] Fix workflow name indentation in Renovate configuration --- .github/workflows/renovate.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index fcfee5f..30b53cf 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -1,4 +1,4 @@ - +name: "Renovate" on: workflow_dispatch: inputs: From aa1d2d3d77048a5df29c0d1cf79658b357b3a51a Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 7 Oct 2025 18:54:16 +0000 Subject: [PATCH 10/19] Add renovate.json --- renovate.json | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 renovate.json diff --git a/renovate.json b/renovate.json new file mode 100644 index 0000000..7190a60 --- /dev/null +++ b/renovate.json @@ -0,0 +1,3 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json" +} From 6d0b38e9e617239a7ef622fe6f444b1681a79add Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Thu, 9 Oct 2025 19:13:49 +0200 Subject: [PATCH 11/19] Add custom manager for Dockerfile versions to Renovate extends configuration --- .github/workflows/renovate.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index 30b53cf..a42c7f2 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -25,5 +25,5 @@ jobs: RENOVATE_COMMIT_MESSAGE_SUFFIX: '{{#unless groupName}}{{#if (equals updateType "digest")}}(from {{currentDigestShort}}){{else}}(from {{currentVersion}}){{/if}}{{/unless}}' RENOVATE_LABELS: "['dependencies']" RENOVATE_DEPENDENCY_DASHBOARD_LABELS: "['dependencies']" - RENOVATE_EXTENDS: '["config:best-practices","mergeConfidence:all-badges",":pinVersions","security:openssf-scorecard",":prHourlyLimitNone",":separateMultipleMajorReleases",":configMigration"]' + RENOVATE_EXTENDS: '["config:best-practices","mergeConfidence:all-badges",":pinVersions","security:openssf-scorecard",":prHourlyLimitNone",":separateMultipleMajorReleases",":configMigration","customManagers:dockerfileVersions"]' RENOVATE_PLATFORM: "github" From af1404dfbdcc31b920df064be337c66f0b474917 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Thu, 9 Oct 2025 20:34:14 +0200 Subject: [PATCH 12/19] Update Dockerfile to use specific versions for dependencies and enhance renovate.json with package rules --- Dockerfile | 56 ++++++++++++++++++++++++++++++++++++++------------- renovate.json | 17 +++++++++++++++- 2 files changed, 58 insertions(+), 15 deletions(-) diff --git a/Dockerfile b/Dockerfile index acb8b3c..a1f26ed 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,14 +1,42 @@ +# syntax=docker/dockerfile:1.19.0@sha256:b6afd42430b15f2d2a4c5a02b919e98a525b785b1aaff16747d2f623364e39b6 + +# renovate: datasource=deb depName=build-essential +ARG BUILD_ESSENTIAL_VERSION=12.12 +# renovate: datasource=deb depName=libpq-dev +ARG LIBPQ_DEV_VERSION=17.6-0+deb13u1 +# renovate: datasource=deb depName=libcurl4-openssl-dev +ARG LIBCURL4_OPENSSL_DEV_VERSION=8.14.1-2 +# renovate: datasource=deb depName=libssl-dev +ARG LIBSSL_DEV_VERSION=3.5.1-1 +# renovate: datasource=deb depName=pkg-config +ARG PKG_CONFIG_VERSION=1.8.1-4 +# renovate: datasource=deb depName=nginx +ARG NGINX_VERSION=1.24.0-1 +# renovate: datasource=deb depName=supervisor +ARG SUPERVISOR_VERSION=4.2.5-1 +# renovate: datasource=deb depName=postgresql-client +ARG POSTGRESQL_CLIENT_VERSION=15.10-0+deb13u1 +# renovate: datasource=deb depName=gettext-base +ARG GETTEXT_BASE_VERSION=0.21-1 +# renovate: datasource=deb depName=curl +ARG CURL_VERSION=8.14.1-2 +# renovate: datasource=deb depName=ca-certificates +ARG CA_CERTIFICATES_VERSION=20241027 +# renovate: datasource=deb depName=libpq5 +ARG LIBPQ5_VERSION=17.6-0+deb13u1 +# renovate: datasource=deb depName=libssl3 +ARG LIBSSL3_VERSION=3.5.1-1 FROM python:3.13-slim-trixie AS builder # Install build tools (only in builder stage) RUN apt-get update && \ apt-get install -y --no-install-recommends \ - build-essential \ - libpq-dev \ - libcurl4-openssl-dev \ - libssl-dev \ - pkg-config && \ + build-essential=${BUILD_ESSENTIAL_VERSION} \ + libpq-dev=${LIBPQ_DEV_VERSION} \ + libcurl4-openssl-dev=${LIBCURL4_OPENSSL_DEV_VERSION} \ + libssl-dev=${LIBSSL_DEV_VERSION} \ + pkg-config=${PKG_CONFIG_VERSION} && \ apt-get clean && \ rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* @@ -29,15 +57,15 @@ LABEL org.opencontainers.image.description="Warracker - Warranty Tracker" # Install runtime dependencies only RUN apt-get update && \ apt-get install -y --no-install-recommends \ - nginx \ - supervisor \ - postgresql-client \ - gettext-base \ - curl \ - ca-certificates \ - libpq5 \ - libcurl4 \ - libssl3 && \ + nginx=${NGINX_VERSION} \ + supervisor=${SUPERVISOR_VERSION} \ + postgresql-client=${POSTGRESQL_CLIENT_VERSION} \ + gettext-base=${GETTEXT_BASE_VERSION} \ + curl=${CURL_VERSION} \ + ca-certificates=${CA_CERTIFICATES_VERSION} \ + libpq5=${LIBPQ5_VERSION} \ + libcurl4=${LIBCURL4_OPENSSL_DEV_VERSION} \ + libssl3=${LIBSSL3_VERSION} && \ apt-get clean && \ rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* diff --git a/renovate.json b/renovate.json index 7190a60..12f4004 100644 --- a/renovate.json +++ b/renovate.json @@ -1,3 +1,18 @@ { - "$schema": "https://docs.renovatebot.com/renovate-schema.json" + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "packageRules": [ + { + "matchDatasources": ["deb"], + "registryUrlTemplate": "https://deb.debian.org/debian?suite=trixie&components=main,contrib,non-free&binaryArch=amd64", + "groupName": "Debian packages" + }, + { + "matchManagers": ["pip_requirements"], + "groupName": "Python packages" + }, + { + "matchDatasources": ["github-actions"], + "groupName": "GitHub Actions" + } + ] } From 0c2b70ff5aef395ef77cf884458afd0842fcba82 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Thu, 9 Oct 2025 20:47:51 +0200 Subject: [PATCH 13/19] Fix Dockerfile ARG for libssl3t64 and update registryUrl in renovate.json --- Dockerfile | 6 +++--- renovate.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/Dockerfile b/Dockerfile index a1f26ed..c5eb657 100644 --- a/Dockerfile +++ b/Dockerfile @@ -24,8 +24,8 @@ ARG CURL_VERSION=8.14.1-2 ARG CA_CERTIFICATES_VERSION=20241027 # renovate: datasource=deb depName=libpq5 ARG LIBPQ5_VERSION=17.6-0+deb13u1 -# renovate: datasource=deb depName=libssl3 -ARG LIBSSL3_VERSION=3.5.1-1 +# renovate: datasource=deb depName=libssl3t64 +ARG LIBSSL3T64_VERSION=3.5.1-1 FROM python:3.13-slim-trixie AS builder @@ -65,7 +65,7 @@ RUN apt-get update && \ ca-certificates=${CA_CERTIFICATES_VERSION} \ libpq5=${LIBPQ5_VERSION} \ libcurl4=${LIBCURL4_OPENSSL_DEV_VERSION} \ - libssl3=${LIBSSL3_VERSION} && \ + libssl3t64=${LIBSSL3_VERSION} && \ apt-get clean && \ rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* diff --git a/renovate.json b/renovate.json index 12f4004..f307c36 100644 --- a/renovate.json +++ b/renovate.json @@ -3,7 +3,7 @@ "packageRules": [ { "matchDatasources": ["deb"], - "registryUrlTemplate": "https://deb.debian.org/debian?suite=trixie&components=main,contrib,non-free&binaryArch=amd64", + "registryUrl": "https://deb.debian.org/debian?suite=trixie&components=main,contrib,non-free&binaryArch=amd64", "groupName": "Debian packages" }, { From be5fc20130619870cd53a393e6d1a94e188b9eb8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Thu, 9 Oct 2025 20:52:03 +0200 Subject: [PATCH 14/19] Fix typo in registryUrl key to registryUrls in renovate.json --- renovate.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/renovate.json b/renovate.json index f307c36..196b06f 100644 --- a/renovate.json +++ b/renovate.json @@ -3,7 +3,7 @@ "packageRules": [ { "matchDatasources": ["deb"], - "registryUrl": "https://deb.debian.org/debian?suite=trixie&components=main,contrib,non-free&binaryArch=amd64", + "registryUrls": "https://deb.debian.org/debian?suite=trixie&components=main,contrib,non-free&binaryArch=amd64", "groupName": "Debian packages" }, { From 56c5eb5a50a0729d1e6dc7a781511536d5eea906 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Thu, 9 Oct 2025 20:54:33 +0200 Subject: [PATCH 15/19] Fix registryUrls format in renovate.json to use an array --- renovate.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/renovate.json b/renovate.json index 196b06f..3da7f94 100644 --- a/renovate.json +++ b/renovate.json @@ -3,7 +3,7 @@ "packageRules": [ { "matchDatasources": ["deb"], - "registryUrls": "https://deb.debian.org/debian?suite=trixie&components=main,contrib,non-free&binaryArch=amd64", + "registryUrls": ["https://deb.debian.org/debian?suite=trixie&components=main,contrib,non-free&binaryArch=amd64"], "groupName": "Debian packages" }, { From 263c2c1d2ecc6f5ce527a0292d839456174881b7 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 9 Oct 2025 18:55:50 +0000 Subject: [PATCH 16/19] Update Debian packages --- Dockerfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index c5eb657..f84d980 100644 --- a/Dockerfile +++ b/Dockerfile @@ -11,13 +11,13 @@ ARG LIBSSL_DEV_VERSION=3.5.1-1 # renovate: datasource=deb depName=pkg-config ARG PKG_CONFIG_VERSION=1.8.1-4 # renovate: datasource=deb depName=nginx -ARG NGINX_VERSION=1.24.0-1 +ARG NGINX_VERSION=1.26.3-3+deb13u1 # renovate: datasource=deb depName=supervisor -ARG SUPERVISOR_VERSION=4.2.5-1 +ARG SUPERVISOR_VERSION=4.2.5-3 # renovate: datasource=deb depName=postgresql-client ARG POSTGRESQL_CLIENT_VERSION=15.10-0+deb13u1 # renovate: datasource=deb depName=gettext-base -ARG GETTEXT_BASE_VERSION=0.21-1 +ARG GETTEXT_BASE_VERSION=0.23.1-2 # renovate: datasource=deb depName=curl ARG CURL_VERSION=8.14.1-2 # renovate: datasource=deb depName=ca-certificates From 8e58321797f8af7e104d9f6f8bea83cff5fd5f69 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 9 Oct 2025 18:56:00 +0000 Subject: [PATCH 17/19] Update dependency ca-certificates to v20250419 (from 20241027) --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index c5eb657..6c035c6 100644 --- a/Dockerfile +++ b/Dockerfile @@ -21,7 +21,7 @@ ARG GETTEXT_BASE_VERSION=0.21-1 # renovate: datasource=deb depName=curl ARG CURL_VERSION=8.14.1-2 # renovate: datasource=deb depName=ca-certificates -ARG CA_CERTIFICATES_VERSION=20241027 +ARG CA_CERTIFICATES_VERSION=20250419 # renovate: datasource=deb depName=libpq5 ARG LIBPQ5_VERSION=17.6-0+deb13u1 # renovate: datasource=deb depName=libssl3t64 From 6a34f1d7c01b41247c8e5e49ccec32f7bd736eb7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Thu, 9 Oct 2025 21:01:34 +0200 Subject: [PATCH 18/19] Add docker-compose manager configuration to renovate.json --- renovate.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/renovate.json b/renovate.json index 3da7f94..27ea5cb 100644 --- a/renovate.json +++ b/renovate.json @@ -13,6 +13,11 @@ { "matchDatasources": ["github-actions"], "groupName": "GitHub Actions" + }, + { + "matchManagers": ["docker-compose"], + "pinDigests": false, + "enabled": false } ] } From 08caa51c54053ab004c4e77e52291fdf1488dd75 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 9 Oct 2025 19:03:20 +0000 Subject: [PATCH 19/19] Update dependency flask-cors to v5 (from 4.0.1) --- backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index 0cd8f49..81c0d08 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -2,7 +2,7 @@ Flask==3.0.3 gunicorn==23.0.0 psycopg2==2.9.10 Werkzeug==3.0.3 -flask-cors==4.0.1 +flask-cors==5.0.1 Flask-Login==0.6.3 Flask-Bcrypt==1.0.1 PyJWT==2.8.0