Merge pull request 'ci(tag): release Gitea (commit list) avant le dispatch Renovate' (#78 ) from chore/release-notes into main

Reviewed-on: #78
ci(tag): release Gitea (commit list) avant le dispatch Renovate
2026-10-19 13:37:54 -04:00 · 2026-10-19 13:09:23 -04:00 · 2026-10-19 11:44:02 -04:00 · 2026-10-18 22:14:20 -04:00 · 2026-10-18 13:46:34 -04:00 · 2026-10-18 13:21:35 -04:00
1 changed files with 30 additions and 0 deletions
@@ -45,3 +45,33 @@ jobs:
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          pull: true
+
+  release:
+    # Publishes the Gitea release for this tag (body = commits since the previous
+    # tag). Renovate copies that body into the bump PR in
+    # perso_private/tf-depl-kubernetes under "Release Notes"; without a release
+    # that section stays empty (bare "Compare Source" link).
+    needs: [build-push]
+    uses: perso/gitea-pipelines/.gitea/workflows/gitea-release.yaml@main
+    with:
+      image: jcabillot/opencode
+    secrets: inherit
+
+  trigger-renovate:
+    # The deployment repo perso_private/tf-depl-kubernetes pins this image; its
+    # Renovate instance only scans hourly, so this dispatch opens the image bump
+    # PR within minutes of the release instead of up to an hour later.
+    needs: [build-push, release]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Trigger Renovate on perso_private/tf-depl-kubernetes
+        # needs: build-push — Renovate reads Docker Hub, so a scan started before
+        # the push lands would only see the previous release.
+        # RENOVATE_TOKEN is the org-level secret of this organisation.
+        run: |
+          curl -sS -f -X POST \
+            -u "renovate:${{ secrets.RENOVATE_TOKEN }}" \
+            -H "Content-Type: application/json" \
+            -d '{"ref":"main"}' \
+            "https://scm.cabillot.eu/api/v1/repos/perso_private/tf-depl-kubernetes/actions/workflows/renovate.yaml/dispatches"
+          echo "Renovate dispatched on perso_private/tf-depl-kubernetes"
Author	SHA1	Message	Date
jcabillot	22e6a8a790	Merge pull request 'ci(tag): release Gitea (commit list) avant le dispatch Renovate' (#78 ) from chore/release-notes into main Main Release / test (push) Successful in 15s Details Renovate / renovate (push) Successful in 40s Details Main Release / hadolint (push) Successful in 8s Details Main Release / build (push) Successful in 27s Details Main Release / tag (push) Successful in 14s Details Tag Release / hadolint (push) Successful in 11s Details Tag Release / test (push) Successful in 16s Details Tag Release / build-push (push) Successful in 4m26s Details Gitea Release / release (push) Successful in 10s Details Tag Release / release (push) Successful in 10s Details Tag Release / trigger-renovate (push) Successful in 7s Details Reviewed-on: #78	2026-10-19 13:37:54 -04:00
opencodecabilloteu	bd5fc2f7c7	ci(tag): release Gitea (commit list) avant le dispatch Renovate PR Checks / hadolint (pull_request) Successful in 7s Details PR Checks / build-test (pull_request) Successful in 15s Details	2026-10-19 13:09:23 -04:00
jcabillot	bdadfb11aa	Merge pull request 'fix(ci): corps JSON valide dans le dispatch Renovate (accolades doublées → 422)' (#77 ) from fix/renovate-dispatch-json into main Main Release / hadolint (push) Successful in 9s Details Main Release / test (push) Successful in 18s Details Renovate / renovate (push) Successful in 37s Details Main Release / build (push) Successful in 3m1s Details Main Release / tag (push) Successful in 19s Details Tag Release / hadolint (push) Successful in 9s Details Tag Release / test (push) Successful in 17s Details Tag Release / build-push (push) Successful in 5m20s Details Tag Release / trigger-renovate (push) Successful in 4s Details Reviewed-on: #77	2026-10-19 11:44:02 -04:00
opencodecabilloteu	f6db16a938	fix(ci): corps JSON valide pour le dispatch Renovate PR Checks / hadolint (pull_request) Successful in 20s Details PR Checks / build-test (pull_request) Successful in 28s Details	2026-10-18 22:14:20 -04:00
jcabillot	241284d8d3	Merge pull request 'ci(tag): déclenche Renovate sur tf-depl-kubernetes dès que l'image de release est poussée (opencode)' (#76 ) from ci/renovate-dispatch-on-release into main Main Release / hadolint (push) Successful in 52s Details Main Release / test (push) Successful in 22s Details Renovate / renovate (push) Failing after 11m41s Details Main Release / build (push) Successful in 5m40s Details Main Release / tag (push) Successful in 29s Details Tag Release / hadolint (push) Successful in 15s Details Tag Release / test (push) Successful in 8m16s Details Tag Release / build-push (push) Successful in 9m22s Details Tag Release / trigger-renovate (push) Failing after 5s Details PR Checks / hadolint (pull_request) Successful in 11s Details PR Checks / build-test (pull_request) Successful in 15s Details Reviewed-on: #76	2026-10-18 13:46:34 -04:00
opencodecabilloteu	a8956e4c4e	ci(tag): dispatch Renovate on tf-depl-kubernetes once the release image is pushed PR Checks / hadolint (pull_request) Successful in 12s Details PR Checks / build-test (pull_request) Successful in 4m15s Details A release only reached perso_private/tf-depl-kubernetes on the next hourly Renovate scan, so the image bump PR could lag up to an hour behind the tag. After the image push completes, dispatch that repo's Renovate workflow through the Gitea API (workflow_dispatch is already enabled there). It authenticates with the RENOVATE_TOKEN org secret of this organisation — the same token the Renovate instance itself uses, no extra credential. The job fails loudly so a rotated token shows up instead of the trigger silently going missing.	2026-10-18 13:21:35 -04:00