chore(deps): pin ghcr.io/astral-sh/uv docker tag to 531f855

.copier/infra.yml

@@ -1,4 +1,4 @@
-_commit: v0.4.0
+_commit: v0.3.1
 _src_path: https://git.kotikot.com/templates/infra.git
 init_git: false
 layout: parts

backend/Dockerfile

@@ -1,4 +1,4 @@
-FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim
+FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim@sha256:531f855bda2c73cd6ef67d56b733b357cea384185b3022bd09f05e002cd144ca
 
 RUN apt-get update && apt-get install -y build-essential && rm -rf /var/lib/apt/lists/*
 

frontend/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   frontend-dev:
-    image: oven/bun:alpine@sha256:d888c0ae6c86d7866ff10c5aafdd9077b36aee6455b33dd270fb93c0dd5cef6f
+    image: oven/bun:alpine
     profiles: [frontend-dev]
     restart: unless-stopped
     working_dir: /app

frontend/package.json

@@ -8,12 +8,12 @@
     "@tailwindcss/typography": "^0.5.19",
     "@tailwindcss/vite": "^4.2.2",
     "@types/node": "^25.9.1",
-    "@types/pako": "^3.0.0",
+    "@types/pako": "^2.0.4",
     "sass": "^1.100.0",
     "svelte": "^5.55.2",
     "svelte-check": "^4.4.6",
     "tailwindcss": "^4.2.2",
-    "typescript": "^7.0.0",
+    "typescript": "^6.0.2",
     "ultracite": "7.8.0",
     "vite": "^8.0.7"
   },
@@ -34,7 +34,7 @@
   "dependencies": {
     "bits-ui": "^2.18.1",
     "lottie-web": "^5.13.0",
-    "pako": "^3.0.0",
+    "pako": "^2.1.0",
     "uqr": "^0.1.3"
   }
 }

renovate.jsonc

@@ -1,4 +1,144 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["local>templates/renovate"]
+  "extends": [
+    "config:recommended",
+    ":dependencyDashboard"
+  ],
+  "timezone": "Europe/Warsaw",
+  "enabledManagers": [
+    "docker-compose",
+    "dockerfile",
+    "npm",
+    "bun",
+    "pep621",
+    "pip_requirements",
+    "gomod",
+    "github-actions"
+  ],
+  "ignorePaths": [
+    "**/caddy/**",
+    "_legacy/**",
+    "**/docker-compose.worktree.yml"
+  ],
+  "pinDigests": true,
+  "minimumReleaseAge": "3 days",
+  "minimumReleaseAgeBehaviour": "timestamp-required",
+  "internalChecksFilter": "strict",
+  "labels": [
+    "renovate"
+  ],
+  "rebaseWhen": "behind-base-branch",
+  "platformAutomerge": true,
+  "automergeStrategy": "squash",
+  "prHourlyLimit": 8,
+  "prConcurrentLimit": 25,
+  "packageRules": [
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchUpdateTypes": [
+        "patch",
+        "minor",
+        "digest",
+        "pinDigest"
+      ],
+      "automerge": true
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchUpdateTypes": [
+        "pin",
+        "pinDigest"
+      ],
+      "groupName": null,
+      "automerge": true
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "automerge": false,
+      "dependencyDashboardApproval": true
+    },
+    {
+      "matchPackageNames": [
+        "postgres",
+        "docker.io/library/postgres",
+        "postgis/postgis",
+        "redis",
+        "docker.io/library/redis",
+        "mongo",
+        "docker.io/library/mongo",
+        "mariadb",
+        "docker.io/library/mariadb",
+        "timescale/timescaledb"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "automerge": false,
+      "dependencyDashboardApproval": true
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchPackageNames": [
+        "ghcr.io/**",
+        "lscr.io/**",
+        "quay.io/**",
+        "public.ecr.aws/**",
+        "docker.elastic.co/**"
+      ],
+      "minimumReleaseAgeBehaviour": "timestamp-optional",
+      "automerge": false,
+      "addLabels": [
+        "wait-3d"
+      ]
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchCurrentValue": "/^(latest|stable|main|edge|main-stable|latest-full|s6|dind)$/",
+      "minimumReleaseAgeBehaviour": "timestamp-optional",
+      "automerge": false,
+      "addLabels": [
+        "wait-3d"
+      ]
+    },
+    {
+      "matchDatasources": [
+        "!docker"
+      ],
+      "matchUpdateTypes": [
+        "pin",
+        "patch",
+        "minor",
+        "digest",
+        "pinDigest"
+      ],
+      "groupName": "code dependencies",
+      "automerge": false,
+      "addLabels": [
+        "deps-code"
+      ]
+    },
+    {
+      "matchDatasources": [
+        "!docker"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "automerge": false,
+      "dependencyDashboardApproval": true
+    }
+  ]
 }