.

Author: paulo-ferraz-oliveira

.github/renovate.json

@@ -1,7 +1,10 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:best-practices"
+    "config:recommended",
+    "helpers:pinGitHubActionDigests",
+    ":pinDevDependencies",
+    ":pinDigestsDisabled"
   ],
   "packageRules": [
     {
@@ -45,7 +48,7 @@
         ".github/.*/.*\\.yml"
       ],
       "matchStrings": [
-        "# renovate datasource: (?<datasource>[^,]+), depName: (?<depName>[^\\n]+)\\n.+?(?<currentValue>v?\\d+(\\.\\d+(\\.\\d+)?)?)\\n"
+        "# renovate datasource: (?<datasource>[^,]+), depName: (?<depName>[^\\n]+)\\n.+?(?<currentValue>v?\\d+(\\.\\d+(\\.\\d+)?)?(-[^\\n]+)?)\\n"
       ]
     },
     {
@@ -61,7 +64,7 @@
       "versioningTemplate": "semver"
     },
     {
-      "description": "Match versions in Dockerfile",
+      "description": "Match versions (per datasource and depName) in Dockerfile",
       "customType": "regex",
       "fileMatch": [
         "Dockerfile"

.github/workflows/lint.yml

@@ -4,14 +4,19 @@ name: Lint
 "on": push
 
 jobs:
+  vsns:
+    runs-on: ubuntu-22.04
+
+    outputs:
+      # renovate datasource: docker, depName: hadolint/hadolint
+      hadolint: 2.12.0
+
   build:
     name: Lint
 
     runs-on: ubuntu-22.04
 
-    env:
-      # renovate datasource: docker, depName: hadolint/hadolint
-      hadolint-version: 2.12.0
+    needs: [vsns]
 
     steps:
       - name: Checkout
@@ -23,7 +28,7 @@ jobs:
           npm run dist
 
       - name: Lint Dockerfile
-        run: docker run --rm -i hadolint/hadolint:${{ env.hadolint-version }} < Dockerfile
+        run: docker run --rm -i hadolint/hadolint:${{ needs.vsns.outputs.hadolint }} < Dockerfile
 
       - name: Check if build left artifacts
         run: git diff --exit-code