diff --git a/.gitea/workflows/tag.yaml b/.gitea/workflows/tag.yaml index 23b5ab9..804d1e7 100644 --- a/.gitea/workflows/tag.yaml +++ b/.gitea/workflows/tag.yaml @@ -45,3 +45,22 @@ jobs: tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} pull: true + + trigger-renovate: + # The deployment repo perso_private/tf-depl-kubernetes pins this image; its + # Renovate instance only scans hourly, so this dispatch opens the image bump + # PR within minutes of the release instead of up to an hour later. + needs: [build-push] + runs-on: ubuntu-latest + steps: + - name: Trigger Renovate on perso_private/tf-depl-kubernetes + # needs: build-push — Renovate reads Docker Hub, so a scan started before + # the push lands would only see the previous release. + # RENOVATE_TOKEN is the org-level secret of this organisation. + run: | + curl -sS -f -X POST \ + -u "renovate:${{ secrets.RENOVATE_TOKEN }}" \ + -H "Content-Type: application/json" \ + -d '{{"ref":"main"}}' \ + "https://scm.cabillot.eu/api/v1/repos/perso_private/tf-depl-kubernetes/actions/workflows/renovate.yaml/dispatches" + echo "Renovate dispatched on perso_private/tf-depl-kubernetes"