Repository navigation
Configure Renovate for Go, Docker and Actions - #8
Merged
1 commit merged intoOct 29, 2026
Merged
1 commit merged into
1 commit merged into
Conversation
lemuelroberto
force-pushed
the
add-renovate
branch
from
October 29, 2026 23:17
4cf04ef to
28f145c
Compare
Every pin in the tree -- go.mod, the compose and Dockerfile images, the action SHAs, pg_tle -- has so far been bumped by hand, which in practice means not bumped. Renovate watches all of them on a weekly schedule, keeps go.sum tidy, and groups the noisy updates (action SHAs, image digests, golang.org/x) so review stays cheap. cel-go and PostgreSQL majors get a note in their PR body rather than a routine path: cel-go is the conformance oracle and CLAUDE.md keeps it exactly pinned, so its bump has to be a deliberate re-measurement with oracle.Version moved alongside. pg_tle is pinned as an ARG Renovate cannot see, so a regex manager tracks it in the Dockerfile and the install guide together.
lemuelroberto
force-pushed
the
add-renovate
branch
from
October 29, 2026 23:29
28f145c to
811f9ce
Compare
lemuelroberto
closed this pull request by merging all changes
into
emfga:main
in
649eee0
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds
renovate.json, replacing the bareconfig:recommendedfrom theonboarding PR (#2) with a config fitted to this repo. Merging this
makes #2 redundant; close #2 once this lands.
What it watches
go.modmodules and thegodirective, withpostUpdateOptions: ["gomodTidy", "gomodUpdateImportPaths"]postgres:18-alpineandgolang:*-alpineincompose.yaml, theBASE_IMAGEdefault indocker/pg_tle.Dockerfile; digests pinned (config:best-practices)aws/pg_tlefromARG PG_TLE_VERSION=in theDockerfile and the version named in
docs/INSTALL.md, updatedtogether
Behaviour
scorecard, vulnerability alerts (labelled
security), São Paulotimezone, early-Monday schedule, no rate limit
Bump <dep> …, no semantic prefixes (CLAUDE.mdforbids conventional commits)
in one PR,
golang.org/x/*in one PR, and thegodirective withthe
golangimage as "Go toolchain"cel-go is the conformance oracle that CLAUDE.md keeps exactly
pinned, so its PR needs
internal/oracle.Versionmoved and are-measurement; a Postgres major needs pg_tle checked against it
as a PR on the Monday schedule and is merged by hand
Not tracked
ci.yml/internal/corpus.Pin: itmoves only as a deliberate re-measurement, and a test already
enforces that both stay equal.
Validated with
renovate-config-validator(Renovate 44.198.0).