Merge pull request 'chore(deps): update renovate/renovate docker tag to v43.15' (#8) from renovate/renovate-renovate-43.x into main

Reviewed-on: #8

.github/workflows/docker-publish.yml

@@ -1,57 +0,0 @@
-name: Build and Publish Docker image
-
-on:
-  push:
-    branches: [ "main" ]
-    tags: [ "v*" ]
-    paths-ignore:
-      - "README.md"
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Log in to GitHub Container Registry
-        uses: docker/login-action@v3
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Determine Docker tags
-        id: vars
-        run: |
-          # Always tag with commit SHA
-          TAGS="ghcr.io/${{ github.repository_owner }}/opencloud-oidc-webfinger-proxy:${{ github.sha }}"
-
-          # If push to main → add :latest
-          if [[ "${GITHUB_REF_TYPE}" == "branch" && "${GITHUB_REF_NAME}" == "main" ]]; then
-            TAGS="$TAGS,ghcr.io/${{ github.repository_owner }}/opencloud-oidc-webfinger-proxy:latest"
-          fi
-
-          # If push of a version tag → add version tag (e.g. v1.0.0)
-          if [[ "${GITHUB_REF_TYPE}" == "tag" ]]; then
-            VERSION_TAG=${GITHUB_REF_NAME}
-            TAGS="$TAGS,ghcr.io/${{ github.repository_owner }}/opencloud-oidc-webfinger-proxy:${VERSION_TAG}"
-          fi
-
-          echo "TAGS=$TAGS" >> $GITHUB_ENV
-          echo "Docker tags to push:"
-          echo "$TAGS" | tr ',' '\n'
-
-      - name: Build and push Docker image
-        uses: docker/build-push-action@v5
-        with:
-          push: true
-          tags: ${{ env.TAGS }}
-          platforms: linux/amd64,linux/arm64

.releaserc.yaml

@@ -0,0 +1,6 @@
+plugins:
+  - "@semantic-release/commit-analyzer"
+  - "@semantic-release/release-notes-generator"
+  - "@semantic-release/changelog"
+  - ["@semantic-release/git", { assets: ["CHANGELOG.md"], message: "chore(release): ${nextRelease.version} [skip ci]" }]
+  - "@forge-for-gitea/semantic-release-gitea"

.woodpecker/docker-release.yaml

@@ -0,0 +1,41 @@
+when:
+  - event: push
+    branch: main
+  - event: tag
+    ref: "refs/tags/v*"
+
+steps:
+  - name: release
+    image: node:20-alpine
+    environment:
+      GITEA_TOKEN:
+        from_secret: gitea_token
+      GITEA_USERNAME:
+        from_secret: gitea_username
+      GITEA_URL: ${CI_FORGE_URL}
+    commands:
+      - apk add --no-cache git
+      - git config --global credential.helper store
+      - echo "https://$${GITEA_USERNAME}:$${GITEA_TOKEN}@git.barbiric.io" > ~/.git-credentials
+      - npm install -g semantic-release @semantic-release/commit-analyzer @semantic-release/release-notes-generator @semantic-release/changelog @semantic-release/git @forge-for-gitea/semantic-release-gitea
+      - npx semantic-release
+    when:
+      event: push
+      branch: main
+
+  - name: docker
+    image: plugins/kaniko
+    settings:
+      registry: git.barbiric.io
+      repo: git.barbiric.io/${CI_REPO}
+      tags:
+        - latest
+        - "${CI_COMMIT_TAG##v}"
+        - "${CI_COMMIT_TAG}"
+      username:
+        from_secret: gitea_username
+      password:
+        from_secret: gitea_token
+    when:
+      event: tag
+      ref: "refs/tags/v*"

.woodpecker/renovate.yaml

@@ -0,0 +1,21 @@
+when:
+  - event: cron
+    cron: "renovate"
+  - event: manual
+
+steps:
+  - name: renovate
+    image: renovate/renovate:43.15
+    environment:
+      RENOVATE_PLATFORM: gitea
+      RENOVATE_ENDPOINT: ${CI_FORGE_URL}
+      RENOVATE_REPOSITORIES: ${CI_REPO}
+      RENOVATE_TOKEN:
+        from_secret: RENOVATE_CI_KEY
+      RENOVATE_ONBOARDING: false
+      RENOVATE_GITHUB_COM_TOKEN:
+        from_secret: RENOVATE_GH_KEY
+      LOG_LEVEL: info
+
+    commands:
+      - renovate ${CI_REPO}

CHANGELOG.md

@@ -0,0 +1,15 @@
+# [1.1.0](https://git.barbiric.io/barbirict/opencloud-oidc-webfinger-proxy/compare/v1.0.0...v1.1.0) (2026-02-15)
+
+
+### Bug Fixes
+
+* **ci:** escape credential envs ([35bdc52](https://git.barbiric.io/barbirict/opencloud-oidc-webfinger-proxy/commit/35bdc52487a22081723a3125d12590a40800e4bd))
+* **ci:** gitea git config for semantic-release ([b582845](https://git.barbiric.io/barbirict/opencloud-oidc-webfinger-proxy/commit/b5828455743633db72a79159fdaf01760cda5443))
+* **ci:** install git in alpine container ([8e93c3b](https://git.barbiric.io/barbirict/opencloud-oidc-webfinger-proxy/commit/8e93c3b51b1810083ec45e2580121b38243242db))
+* **ci:** migrate to kaniko ([3904259](https://git.barbiric.io/barbirict/opencloud-oidc-webfinger-proxy/commit/390425961ef269b61a9179f6d1ec98f5b389f9a9))
+* **ci:** type registry and repo without var ([5f01255](https://git.barbiric.io/barbirict/opencloud-oidc-webfinger-proxy/commit/5f012559aded7e5b8720046796f22f43a6cf667d))
+
+
+### Features
+
+* **ci:** gitea woodpecker release support ([5fe8af6](https://git.barbiric.io/barbirict/opencloud-oidc-webfinger-proxy/commit/5fe8af66423619c0217f027cfee8901d3be6b2f8))

Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.23-alpine AS builder
+FROM golang:1.26-alpine AS builder
 
 WORKDIR /app
 

renovate.json

@@ -0,0 +1,13 @@
+{
+  "extends": [
+    "config:recommended"
+  ],
+  "dependencyDashboard": true,
+  "assignees": [
+    "barbirict"
+  ],
+  "gitAuthor": "Renovate Bot <renovate-bot@barbiric.io>",
+  "major": {
+    "dependencyDashboardApproval": true
+  }
+}