chore: split renovatebot managers

ansible/group_vars/all.yml

@@ -14,6 +14,6 @@ install_packages:
   - unattended-upgrades
 
 data_folder: /data
-alpine_latest_image: "alpine:latest"
-ubuntu_latest_image: "node:22-trixie"
+alpine_latest_image: "alpine:3.22.1@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1"
+ubuntu_latest_image: "node:22-trixie@sha256:66fdea746582c4b9678414c13aef9d93839f992e4ea6ffbef7f0785e22312bbd"
 debian_latest_image: "git.comprofix.com/mmckinnon/debian-latest:2025.08.31-093853"

renovate.json

@@ -4,28 +4,27 @@
     "local>RenovateBot/renovate-config",
     ":semanticCommitTypeAll(chore)"
   ],
-  "automerge": false,
-  "commitBodyTable": true,
-  "ignoreTests": true,
-  "major": {
-    "automerge": false,
-    "commitMessagePrefix": "chore(deps-major): ",
-    "labels": [
-      "dependencies",
-      "breaking"
-    ]
-  },
-  "customManagers": [
+  "ignoreDeps": ["postgres"],
+  "regexManagers": [
     {
-      "customType": "regex",
-      "managerFilePatterns": [
-        "/(^|/)tasks/.*\\.ya?ml$/",
-        "/(^|/)playbooks/.*\\.ya?ml$/"
-      ],
-      "matchStrings": [
-        "(?<varName>\\w+_image):\\s+\"(?<depName>[\\w./-]+):(?<currentValue>[\\w.-]+)\""
-      ],
-      "datasourceTemplate": "docker"
+      "fileMatch": ["group_vars/all.yml"],
+      "matchStrings": ["^(\\s*(?<depName>\\w+_latest_image):\\s*\"?(?<currentValue>[^\"]+)\"?)"],
+      "datasourceTemplate": "docker",
+      "depNameTemplate": "{{ currentValue }}",
+      "versioningTemplate": "docker"
+    }
+  ],
+  "packageRules": [
+    {
+      "managers": ["docker"],
+      "matchPackageNames": ["alpine", "node"],
+      "pinDigests": true
+    },
+    {
+      "managers": ["docker"],
+      "matchPackageNames": ["git.comprofix.com/mmckinnon/debian-latest"],
+      "registryUrls": ["https://git.comprofix.com/v2/"],
+      "pinDigests": true
     }
   ]
 }