Merge pull request 'ci(tag): déclenche Renovate sur tf-depl-kubernetes dès que l'image de release est poussée (opencode-openchamber)' (#62 ) from ci/renovate-dispatch-on-release into main

Reviewed-on: #62
ci(tag): dispatch Renovate on tf-depl-kubernetes once the release image is pushed
2026-10-18 13:43:29 -04:00 · 2026-10-18 13:22:13 -04:00 · 2026-10-17 20:31:03 -04:00 · 2026-10-18 00:15:36 +00:00
2 changed files with 20 additions and 1 deletions
@@ -38,3 +38,22 @@ jobs:
          pull: true
          cache-from: type=gha
          cache-to: type=gha,mode=max
+
+  trigger-renovate:
+    # The deployment repo perso_private/tf-depl-kubernetes pins this image; its
+    # Renovate instance only scans hourly, so this dispatch opens the image bump
+    # PR within minutes of the release instead of up to an hour later.
+    needs: [build-push]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Trigger Renovate on perso_private/tf-depl-kubernetes
+        # needs: build-push — Renovate reads Docker Hub, so a scan started before
+        # the push lands would only see the previous release.
+        # RENOVATE_TOKEN is the org-level secret of this organisation.
+        run: |
+          curl -sS -f -X POST \
+            -u "renovate:${{ secrets.RENOVATE_TOKEN }}" \
+            -H "Content-Type: application/json" \
+            -d '{{"ref":"main"}}' \
+            "https://scm.cabillot.eu/api/v1/repos/perso_private/tf-depl-kubernetes/actions/workflows/renovate.yaml/dispatches"
+          echo "Renovate dispatched on perso_private/tf-depl-kubernetes"
@@ -2,7 +2,7 @@
 # (fresh Debian/npm packages); the bare `latest` tag stays frozen at the last release.
 FROM jcabillot/opencode:v0.0.60-latest

-ARG OPENCHAMBER_WEB_VERSION=2.3.2
+ARG OPENCHAMBER_WEB_VERSION=2.3.3

 ENV NPM_CONFIG_UPDATE_NOTIFIER=false \
  NPM_CONFIG_LOGLEVEL=warn \
Author	SHA1	Message	Date
jcabillot	df007ca514	Merge pull request 'ci(tag): déclenche Renovate sur tf-depl-kubernetes dès que l'image de release est poussée (opencode-openchamber)' (#62 ) from ci/renovate-dispatch-on-release into main CI Shared Jobs / hadolint (push) Successful in 11s Details Renovate / renovate (push) Successful in 42s Details CI Shared Jobs / build-test (push) Successful in 4m11s Details Main Release / ci (push) Successful in 4m21s Details Main Release / build (push) Successful in 6m44s Details Main Release / tag (push) Successful in 18s Details CI Shared Jobs / hadolint (push) Successful in 9s Details CI Shared Jobs / build-test (push) Successful in 1m51s Details Tag Release / ci (push) Successful in 1m52s Details Tag Release / build-push (push) Successful in 1m37s Details Tag Release / trigger-renovate (push) Waiting to run Details Reviewed-on: #62	2026-10-18 13:43:29 -04:00
opencodecabilloteu	a675a9bbf4	ci(tag): dispatch Renovate on tf-depl-kubernetes once the release image is pushed CI Shared Jobs / hadolint (pull_request) Successful in 20s Details CI Shared Jobs / build-test (pull_request) Successful in 7m29s Details PR Checks / ci (pull_request) Successful in 7m50s Details A release only reached perso_private/tf-depl-kubernetes on the next hourly Renovate scan, so the image bump PR could lag up to an hour behind the tag. After the image push completes, dispatch that repo's Renovate workflow through the Gitea API (workflow_dispatch is already enabled there). It authenticates with the RENOVATE_TOKEN org secret of this organisation — the same token the Renovate instance itself uses, no extra credential. The job fails loudly so a rotated token shows up instead of the trigger silently going missing.	2026-10-18 13:22:13 -04:00
opencodecabilloteu	427a793900	Merge pull request 'chore(deps): update dependency @openchamber/web to v2.3.3' (#61 ) from renovate/openchamber-web-2.x into main CI Shared Jobs / hadolint (push) Successful in 12s Details Renovate / renovate (push) Successful in 43s Details CI Shared Jobs / build-test (push) Successful in 2m16s Details Main Release / ci (push) Successful in 2m17s Details Main Release / build (push) Successful in 55s Details Main Release / tag (push) Successful in 16s Details CI Shared Jobs / hadolint (push) Successful in 11s Details CI Shared Jobs / build-test (push) Successful in 2m22s Details Tag Release / ci (push) Successful in 2m24s Details Tag Release / build-push (push) Successful in 2m12s Details	2026-10-17 20:31:03 -04:00
renovate	90fabf2064	chore(deps): update dependency @openchamber/web to v2.3.3 renovate/stability-days Updates have met minimum release age requirement Details CI Shared Jobs / hadolint (pull_request) Successful in 9s Details CI Shared Jobs / build-test (pull_request) Successful in 2m47s Details PR Checks / ci (pull_request) Successful in 2m56s Details	2026-10-18 00:15:36 +00:00