Skip to content

feat(renovate): convert DevSecNinja/.github main refs to version tags#68

Draft
Copilot wants to merge 2 commits into
mainfrom
copilot/feat-convert-tags-from-main-to-version
Draft

feat(renovate): convert DevSecNinja/.github main refs to version tags#68
Copilot wants to merge 2 commits into
mainfrom
copilot/feat-convert-tags-from-main-to-version

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented May 3, 2026

Renovate was not able to move SHA-pinned DevSecNinja/.github action/workflow references from a # main annotation to released version tags. This adds a targeted Renovate custom manager for those refs.

  • Custom manager

    • Detects DevSecNinja/.github uses: entries pinned to a full SHA and annotated with # main.
    • Applies to workflow files and workflow templates.
    • Uses github-tags so Renovate can replace # main with the latest released tag.
    • Preserves the pinned SHA unless Renovate resolves a replacement digest.
  • Supported pattern

# renovate: datasource=github-tags depName=DevSecNinja/.github
uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main

Renovate can now propose a versioned annotation such as:

# renovate: datasource=github-tags depName=DevSecNinja/.github
uses: DevSecNinja/.github/actions/harden-runner@<resolved-sha> # v1.2.3

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • docs.renovatebot.com
    • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)
  • plugins.dprint.dev
    • Triggering command: /home/REDACTED/.npm/_npx/d897e534e3b3f845/node_modules/.bin/dprint dprint check --config config-sync/files/dprint.json --config-discovery=false .renovate/customManagers.json5 (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Agent-Logs-Url: https://github.com/DevSecNinja/.github/sessions/781c5ed9-f5d2-4f6f-85ad-b487291541f7

Co-authored-by: DevSecNinja <14926452+DevSecNinja@users.noreply.github.com>
Copilot AI changed the title [WIP] Add functionality to convert tags from main to version feat(renovate): convert DevSecNinja/.github main refs to version tags May 3, 2026
Copilot AI requested a review from DevSecNinja May 3, 2026 09:12
@DevSecNinja
Copy link
Copy Markdown
Owner

Not sure if this is the way forward. Also need to check what that renovate header actually does.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat(renovate): can renovate convert these tags from main to version?

2 participants