chore: add renovate config with SHA-pinned action regex manager, fix gitlabci image quotes

.gitea/workflows/docker-build.yaml

@@ -3,7 +3,6 @@ name: Docker Build and Push
 on:
   pull_request:
   push:
-    branches: [master]
   schedule:
     - cron: '30 3 * * 3'
 
@@ -12,22 +11,22 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
       - name: Hadolint
-        uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        uses: hadolint/hadolint-action@54c9adbab1582c2ef04b2016b760714a4bfde3cf
 
   build:
     runs-on: ubuntu-latest
     needs: lint
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
       - name: Build image
         run: docker build -t ci-image:${{ github.sha }} .
       - name: Save image
         run: docker save ci-image:${{ github.sha }} > image.tar
       - name: Upload artifact
-        uses: ChristopherHX/gitea-upload-artifact@62ac910c5d3dfa85c7cb2df15afe2e342b2407c2 # main
+        uses: ChristopherHX/gitea-upload-artifact@62ac910c5d3dfa85c7cb2df15afe2e342b2407c2
         with:
           name: docker-image
           path: image.tar
@@ -37,9 +36,9 @@ jobs:
     needs: build
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
       - name: Download artifact
-        uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7 # main
+        uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7
         with:
           name: docker-image
       - name: Load image
@@ -53,15 +52,15 @@ jobs:
     needs: test
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
       - name: Download artifact
-        uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7 # main
+        uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7
         with:
           name: docker-image
       - name: Load image
         run: docker load < image.tar
       - name: Login to Docker Hub
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}

.gitlab-ci.yml

@@ -1,4 +1,4 @@
-image: "docker:latest"
+image: docker:latest
 
 services:
   - "docker:dind"

Dockerfile

@@ -1,13 +1,12 @@
-FROM ubuntu:26.04
+FROM ubuntu:18.04
 LABEL maintainer="Julien Cabillot <dockerimages@cabillot.eu>"
 
 # hadolint ignore=DL3008,SC3009,SC2086
 RUN export DEBIAN_FRONTEND=noninteractive && \
     export BUILD_PACKAGES=git-core && \
-    export RUNTIME_PACKAGES="python3 bsdmainutils curl python3-six ca-certificates" && \
+    export RUNTIME_PACKAGES="python python3 bsdmainutils curl python3-six ca-certificates" && \
     apt-get -qq update && \
     apt-get -qq --no-install-recommends --yes install ${BUILD_PACKAGES} ${RUNTIME_PACKAGES} && \
-    ln -sf /usr/bin/python3 /usr/bin/python && \
     git clone https://github.com/jvehent/cipherscan.git && \
     /cipherscan/cscan.sh -l && \
     apt-get -qq --yes remove --purge ${BUILD_PACKAGES} && \

renovate.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "gitlabci": {
+    "enabled": true
+  },
+  "regexManagers": [
+    {
+      "description": "Track SHA-pinned Gitea Actions (github-actions manager on Gitea platform cannot resolve SHA refs natively)",
+      "fileMatch": ["^\\.gitea/workflows/.*\\.ya?ml$"],
+      "matchStrings": [
+        "uses:\\s+(?<depName>[\\w.-]+\\/[\\w.-]+(?:\\/[\\w.-]+)?)@(?<currentDigest>[a-f0-9]{40})"
+      ],
+      "datasourceTemplate": "github-releases",
+      "versioningTemplate": "semver"
+    }
+  ]
+}