ci(tag): release Gitea (commit list) avant le dispatch Renovate + corps JSON du dispatch corrigé

Merge pull request 'ci(tag): déclenche Renovate sur tf-depl-kubernetes dès que l'image de release est poussée (rssbridge)' (#31 ) from ci/renovate-dispatch-on-release into master
Reviewed-on: #31
2026-10-18 22:18:01 -04:00 · 2026-10-18 13:44:27 -04:00 · 2026-10-18 13:23:45 -04:00 · 2026-09-18 05:00:27 -04:00 · 2026-09-18 08:32:30 +00:00
4 changed files with 37 additions and 7 deletions
@@ -15,7 +15,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
      - run: docker build --load -t ci-image:${{ github.sha }} .
      - run: bash tests/test.sh ci-image:${{ github.sha }}
  build-push:
@@ -25,7 +25,7 @@ jobs:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
          fetch-depth: 0
-      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
@@ -15,7 +15,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
      - run: docker build --load -t ci-image:${{ github.sha }} .
      - run: bash tests/test.sh ci-image:${{ github.sha }}
  build:
@@ -23,7 +23,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
      - run: docker build -t jcabillot/rssbridge:${{ github.sha }} .
  tag:
    needs: [build]
@@ -15,6 +15,6 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
      - run: docker build --load -t ci-image:${{ github.sha }} .
      - run: bash tests/test.sh ci-image:${{ github.sha }}
@@ -15,7 +15,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
      - run: docker build --load -t ci-image:${{ github.sha }} .
      - run: bash tests/test.sh ci-image:${{ github.sha }}
  build-push:
@@ -23,7 +23,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
@@ -42,3 +42,33 @@ jobs:
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          pull: true
+
+  release:
+    # Publishes the Gitea release for this tag (body = commits since the previous
+    # tag). Renovate copies that body into the bump PR in
+    # perso_private/tf-depl-kubernetes under "Release Notes"; without a release
+    # that section stays empty (bare "Compare Source" link).
+    needs: [build-push]
+    uses: perso/gitea-pipelines/.gitea/workflows/gitea-release.yaml@main
+    with:
+      image: jcabillot/rssbridge
+    secrets: inherit
+
+  trigger-renovate:
+    # The deployment repo perso_private/tf-depl-kubernetes pins this image; its
+    # Renovate instance only scans hourly, so this dispatch opens the image bump
+    # PR within minutes of the release instead of up to an hour later.
+    needs: [build-push, release]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Trigger Renovate on perso_private/tf-depl-kubernetes
+        # needs: build-push — Renovate reads Docker Hub, so a scan started before
+        # the push lands would only see the previous release.
+        # RENOVATE_TOKEN is the org-level secret of this organisation.
+        run: |
+          curl -sS -f -X POST \
+            -u "renovate:${{ secrets.RENOVATE_TOKEN }}" \
+            -H "Content-Type: application/json" \
+            -d '{"ref":"main"}' \
+            "https://scm.cabillot.eu/api/v1/repos/perso_private/tf-depl-kubernetes/actions/workflows/renovate.yaml/dispatches"
+          echo "Renovate dispatched on perso_private/tf-depl-kubernetes"
Author	SHA1	Message	Date
opencodecabilloteu	87890b5680	ci(tag): release Gitea (commit list) avant le dispatch Renovate + corps JSON du dispatch corrigé PR Checks / hadolint (pull_request) Successful in 14s Details PR Checks / build-test (pull_request) Successful in 27s Details	2026-10-18 22:18:01 -04:00
jcabillot	00c766fc5e	Merge pull request 'ci(tag): déclenche Renovate sur tf-depl-kubernetes dès que l'image de release est poussée (rssbridge)' (#31 ) from ci/renovate-dispatch-on-release into master Main Release / hadolint (push) Successful in 22s Details Main Release / test (push) Successful in 1m3s Details Renovate / renovate (push) Successful in 43s Details Main Release / build (push) Successful in 4m47s Details Main Release / tag (push) Successful in 17s Details Tag Release / hadolint (push) Successful in 10s Details Tag Release / test (push) Successful in 23s Details Tag Release / build-push (push) Successful in 1m14s Details Tag Release / trigger-renovate (push) Failing after 36s Details PR Checks / hadolint (pull_request) Successful in 23s Details PR Checks / build-test (pull_request) Successful in 31s Details Reviewed-on: #31	2026-10-18 13:44:27 -04:00
opencodecabilloteu	5701c559f2	ci(tag): dispatch Renovate on tf-depl-kubernetes once the release image is pushed PR Checks / hadolint (pull_request) Successful in 22s Details PR Checks / build-test (pull_request) Successful in 1m48s Details A release only reached perso_private/tf-depl-kubernetes on the next hourly Renovate scan, so the image bump PR could lag up to an hour behind the tag. After the image push completes, dispatch that repo's Renovate workflow through the Gitea API (workflow_dispatch is already enabled there). It authenticates with the RENOVATE_TOKEN org secret of this organisation — the same token the Renovate instance itself uses, no extra credential. The job fails loudly so a rotated token shows up instead of the trigger silently going missing.	2026-10-18 13:23:45 -04:00
opencodecabilloteu	958f61d48f	Merge pull request 'chore(deps): update docker/setup-buildx-action digest to f87e599' (#30 ) from renovate/docker-setup-buildx-action-digest into master Main Release / hadolint (push) Successful in 7s Details Main Release / test (push) Successful in 29s Details Renovate / renovate (push) Successful in 33s Details Main Release / build (push) Successful in 16s Details Main Release / tag (push) Successful in 11s Details Tag Release / hadolint (push) Successful in 7s Details Tag Release / test (push) Successful in 29s Details Tag Release / build-push (push) Successful in 56s Details	2026-09-18 05:00:27 -04:00
renovate	bc099a1d42	chore(deps): update docker/setup-buildx-action digest to f87e599 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 8s Details PR Checks / build-test (pull_request) Successful in 33s Details	2026-09-18 08:32:30 +00:00