chore: add renovate config with SHA-pinned action regex manager, fix gitlabci image quotes

.gitea/workflows/docker-build.yaml

@@ -3,7 +3,6 @@ name: Docker Build and Push
 on:
   pull_request:
   push:
-    branches: [master]
   schedule:
     - cron: '30 3 * * 3'
 

.gitlab-ci.yml

@@ -1,4 +1,4 @@
-image: "docker:latest"
+image: docker:latest
 
 services:
   - "docker:dind"

Dockerfile

@@ -1,13 +1,12 @@
-FROM ubuntu:26.04
+FROM ubuntu:18.04
 LABEL maintainer="Julien Cabillot <dockerimages@cabillot.eu>"
 
 # hadolint ignore=DL3008,SC3009,SC2086
 RUN export DEBIAN_FRONTEND=noninteractive && \
     export BUILD_PACKAGES=git-core && \
-    export RUNTIME_PACKAGES="python3 bsdmainutils curl python3-six ca-certificates" && \
+    export RUNTIME_PACKAGES="python python3 bsdmainutils curl python3-six ca-certificates" && \
     apt-get -qq update && \
     apt-get -qq --no-install-recommends --yes install ${BUILD_PACKAGES} ${RUNTIME_PACKAGES} && \
-    ln -sf /usr/bin/python3 /usr/bin/python && \
     git clone https://github.com/jvehent/cipherscan.git && \
     /cipherscan/cscan.sh -l && \
     apt-get -qq --yes remove --purge ${BUILD_PACKAGES} && \

renovate.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "gitlabci": {
+    "enabled": true
+  },
+  "regexManagers": [
+    {
+      "description": "Track SHA-pinned Gitea Actions (github-actions manager on Gitea platform cannot resolve SHA refs natively)",
+      "fileMatch": ["^\\.gitea/workflows/.*\\.ya?ml$"],
+      "matchStrings": [
+        "uses:\\s+(?<depName>[\\w.-]+\\/[\\w.-]+(?:\\/[\\w.-]+)?)@(?<currentDigest>[a-f0-9]{40})"
+      ],
+      "datasourceTemplate": "github-releases",
+      "versioningTemplate": "semver"
+    }
+  ]
+}