chore(deps): pin ghcr.io/astral-sh/uv docker tag to 531f855

backend/Dockerfile

@@ -1,4 +1,4 @@
-FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim
+FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim@sha256:531f855bda2c73cd6ef67d56b733b357cea384185b3022bd09f05e002cd144ca
 
 RUN apt-get update && apt-get install -y build-essential && rm -rf /var/lib/apt/lists/*
 

renovate.jsonc

@@ -0,0 +1,144 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended",
+    ":dependencyDashboard"
+  ],
+  "timezone": "Europe/Warsaw",
+  "enabledManagers": [
+    "docker-compose",
+    "dockerfile",
+    "npm",
+    "bun",
+    "pep621",
+    "pip_requirements",
+    "gomod",
+    "github-actions"
+  ],
+  "ignorePaths": [
+    "**/caddy/**",
+    "_legacy/**",
+    "**/docker-compose.worktree.yml"
+  ],
+  "pinDigests": true,
+  "minimumReleaseAge": "3 days",
+  "minimumReleaseAgeBehaviour": "timestamp-required",
+  "internalChecksFilter": "strict",
+  "labels": [
+    "renovate"
+  ],
+  "rebaseWhen": "behind-base-branch",
+  "platformAutomerge": true,
+  "automergeStrategy": "squash",
+  "prHourlyLimit": 8,
+  "prConcurrentLimit": 25,
+  "packageRules": [
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchUpdateTypes": [
+        "patch",
+        "minor",
+        "digest",
+        "pinDigest"
+      ],
+      "automerge": true
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchUpdateTypes": [
+        "pin",
+        "pinDigest"
+      ],
+      "groupName": null,
+      "automerge": true
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "automerge": false,
+      "dependencyDashboardApproval": true
+    },
+    {
+      "matchPackageNames": [
+        "postgres",
+        "docker.io/library/postgres",
+        "postgis/postgis",
+        "redis",
+        "docker.io/library/redis",
+        "mongo",
+        "docker.io/library/mongo",
+        "mariadb",
+        "docker.io/library/mariadb",
+        "timescale/timescaledb"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "automerge": false,
+      "dependencyDashboardApproval": true
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchPackageNames": [
+        "ghcr.io/**",
+        "lscr.io/**",
+        "quay.io/**",
+        "public.ecr.aws/**",
+        "docker.elastic.co/**"
+      ],
+      "minimumReleaseAgeBehaviour": "timestamp-optional",
+      "automerge": false,
+      "addLabels": [
+        "wait-3d"
+      ]
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchCurrentValue": "/^(latest|stable|main|edge|main-stable|latest-full|s6|dind)$/",
+      "minimumReleaseAgeBehaviour": "timestamp-optional",
+      "automerge": false,
+      "addLabels": [
+        "wait-3d"
+      ]
+    },
+    {
+      "matchDatasources": [
+        "!docker"
+      ],
+      "matchUpdateTypes": [
+        "pin",
+        "patch",
+        "minor",
+        "digest",
+        "pinDigest"
+      ],
+      "groupName": "code dependencies",
+      "automerge": false,
+      "addLabels": [
+        "deps-code"
+      ]
+    },
+    {
+      "matchDatasources": [
+        "!docker"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "automerge": false,
+      "dependencyDashboardApproval": true
+    }
+  ]
+}