From 48a107e327e4a9210094671d08607b69fc1a4922 Mon Sep 17 00:00:00 2001
From: "Paulo F. Oliveira" <paulo.ferraz.oliveira@gmail.com>
Date: Fri, 7 Jun 2024 04:32:14 +0100
Subject: [PATCH] .

---
 .github/renovate.json      |  9 ++++++---
 .github/workflows/lint.yml | 13 +++++++++----
 2 files changed, 15 insertions(+), 7 deletions(-)

diff --git a/.github/renovate.json b/.github/renovate.json
index db48c61..3438de4 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -1,7 +1,10 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:best-practices"
+    "config:recommended",
+    "helpers:pinGitHubActionDigests",
+    ":pinDevDependencies",
+    ":pinDigestsDisabled"
   ],
   "packageRules": [
     {
@@ -45,7 +48,7 @@
         ".github/.*/.*\\.yml"
       ],
       "matchStrings": [
-        "# renovate datasource: (?<datasource>[^,]+), depName: (?<depName>[^\\n]+)\\n.+?(?<currentValue>v?\\d+(\\.\\d+(\\.\\d+)?)?)\\n"
+        "# renovate datasource: (?<datasource>[^,]+), depName: (?<depName>[^\\n]+)\\n.+?(?<currentValue>v?\\d+(\\.\\d+(\\.\\d+)?)?(-[^\\n]+)?)\\n"
       ]
     },
     {
@@ -61,7 +64,7 @@
       "versioningTemplate": "semver"
     },
     {
-      "description": "Match versions in Dockerfile",
+      "description": "Match versions (per datasource and depName) in Dockerfile",
       "customType": "regex",
       "fileMatch": [
         "Dockerfile"
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 1c56c11..1a6f2d0 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -4,14 +4,19 @@ name: Lint
 "on": push
 
 jobs:
+  vsns:
+    runs-on: ubuntu-22.04
+
+    outputs:
+      # renovate datasource: docker, depName: hadolint/hadolint
+      hadolint: 2.12.0
+
   build:
     name: Lint
 
     runs-on: ubuntu-22.04
 
-    env:
-      # renovate datasource: docker, depName: hadolint/hadolint
-      hadolint-version: 2.12.0
+    needs: [vsns]
 
     steps:
       - name: Checkout
@@ -23,7 +28,7 @@ jobs:
           npm run dist
 
       - name: Lint Dockerfile
-        run: docker run --rm -i hadolint/hadolint:${{ env.hadolint-version }} < Dockerfile
+        run: docker run --rm -i hadolint/hadolint:${{ needs.vsns.outputs.hadolint }} < Dockerfile
 
       - name: Check if build left artifacts
         run: git diff --exit-code