Renovate

https://docs.renovatebot.com/modules/

Configuration

Auto merge

{
  "packageRules": [
    {
      "description": "Auto-merge patch upgrades",
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "automerge": true
    }
  ]
}

Custom regex manager

Inline

A custom manager that parses manager fields from a comment line in Containerfile to update build arguments matching *_VERSION.

Define the manager in renovate.json

{
  "customManagers": [
      {
      "customType": "regex",
      "managerFilePatterns": ["images/*/Containerfile"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>.*?) packageName=(?<packageName>.*?)( versioning=(?<versioning>.*?))?\\s.+_VERSION=(?<currentValue>.*)\\s"
      ]
    }
  ]
}

Example Containerfile with basic semver

FROM $MY_BASE_IMAGE

# renovate: datasource=github-releases packageName=caddyserver/caddy versioning=semver
ARG CADDY_VERSION=2.10.2

Example of custom tag that does not match an existing supported versioning scheme. e.g. release-1.2.3.

FROM $MY_BASE_IMAGE

# renovate: datasource=github-tags packageName=myorg/myapp versioning=regex:^(release-)?(?<major>\d+)\.(?<minor>\d+)\.(?<patch>\d+)?$
ARG APP_VERSION=1.2.3

Running

Local

A RENOVATE_GITHUB_COM_TOKEN is required for github-* datasources.

podman run -ti --rm \
  -v $(pwd):/work --workdir=/work \
  -e LOG_LEVEL=debug \
  -e RENOVATE_GITHUB_COM_TOKEN=github_pat_<token> \
  ghcr.io/renovatebot/renovate:latest \
  renovate --platform=local