chore: split renovatebot managers

Reviewed-on: #4

ansible/group_vars/all.yml

@@ -14,6 +14,6 @@ install_packages:
   - unattended-upgrades
 
 data_folder: /data
-alpine_latest_image: "alpine:latest"
-ubuntu_latest_image: "node:22-trixie"
+alpine_latest_image: "alpine:3.22.1@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1"
+ubuntu_latest_image: "node:22-trixie@sha256:66fdea746582c4b9678414c13aef9d93839f992e4ea6ffbef7f0785e22312bbd"
 debian_latest_image: "git.comprofix.com/mmckinnon/debian-latest:2025.08.31-093853"

renovate.json

@@ -4,21 +4,27 @@
     "local>RenovateBot/renovate-config",
     ":semanticCommitTypeAll(chore)"
   ],
-  "automerge": false,
-  "commitBodyTable": true,
-  "ignoreTests": true,
-  "major": {
-    "automerge": false,
-    "commitMessagePrefix": "chore(deps-major): ",
-    "labels": ["dependencies", "breaking"]
-  },
+  "ignoreDeps": ["postgres"],
   "regexManagers": [
     {
-      "fileMatch": ["(^|/)tasks/.*\\.ya?ml$", "(^|/)playbooks/.*\\.ya?ml$"],
-      "matchStrings": [
-        "(?<varName>\\w+_image):\\s+\"(?<depName>[\\w./-]+):(?<currentValue>[\\w.-]+)\""
-      ],
-      "datasourceTemplate": "docker"
+      "fileMatch": ["group_vars/all.yml"],
+      "matchStrings": ["^(\\s*(?<depName>\\w+_latest_image):\\s*\"?(?<currentValue>[^\"]+)\"?)"],
+      "datasourceTemplate": "docker",
+      "depNameTemplate": "{{ currentValue }}",
+      "versioningTemplate": "docker"
+    }
+  ],
+  "packageRules": [
+    {
+      "managers": ["docker"],
+      "matchPackageNames": ["alpine", "node"],
+      "pinDigests": true
+    },
+    {
+      "managers": ["docker"],
+      "matchPackageNames": ["git.comprofix.com/mmckinnon/debian-latest"],
+      "registryUrls": ["https://git.comprofix.com/v2/"],
+      "pinDigests": true
     }
   ]
-}
+}