Update Renovate configuration and Terraform lockfile

images/base/Dockerfile

@@ -50,12 +50,25 @@ RUN mkdir -p /etc/apt/keyrings && \
 RUN apt update && apt install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
 RUN usermod -aG docker ${USERNAME}
 
+# renovate: datasource=github-tags name=github.com/bazelbuild/buildtools
 ENV BAZEL_BUILDTOOLS_VERSION="6.3.2"
+
+# renovate: datasource=github-tags name=github.com/cli/cli
 ENV GITHUB_CLI_VERSION="2.32.0"
+
+# renovate: datasource=github-tags name=github.com/coder/coder
 ENV CODER_CLI_VERSION="2.1.0"
+
+# renovate: datasource=github-tags name=github.com/hashicorp/terraform
 ENV TERRAFORM_VERSION="1.5.5"
+
+# renovate: datasource=github-tags name=github.com/bazelbuild/bazelisk
 ENV BAZELISK_VERSION="1.18.0"
+
+# renovate: datasource=github-tags name=github.com/kubernetes/kubernetes
 ENV KUBECTL_VERSION="1.28.0"
+
+# renovate: datasource=github-tags name=github.com/helm/helm
 ENV HELM_VERSION="3.12.3"
 
 RUN set -eux; \

images/bun/Dockerfile

@@ -24,6 +24,8 @@ FROM ghcr.io/auguwu/coder-images/base
 ENV USERNAME=noel
 
 USER root
+
+# renovate: datasource=github-tags name=github.com/oven-sh/bun
 ENV BUN_VERSION="0.7.3"
 
 RUN set -eux;                                                                                                              \

images/golang/Dockerfile

@@ -22,16 +22,17 @@
 FROM ghcr.io/auguwu/coder-images/base
 
 ENV USERNAME=noel
-
-# Run as root so we don't have to repeat sudo
 USER root
 
-# Put versions in environment variables
+# renovate: datasource=github-tags name=github.com/golang/go
 ENV GOLANG_VERSION="1.21.0"
+
+# renovate: datasource=github-tags name=github.com/goreleaser/goreleaser
 ENV GORELEASER_VERSION="1.20.0"
+
+# renovate: datasource=github-tags name=github.com/golangci/golangci-lint
 ENV GOLANGCI_VERSION="1.54.2"
 
-# Install packages here.
 RUN set -eux; \
   arch="$(dpkg --print-architecture)"; \
   case "${arch}" in \

images/java/Dockerfile

@@ -22,26 +22,22 @@
 FROM ghcr.io/auguwu/coder-images/base
 
 ENV USERNAME=noel
-
-# Run as root so we don't have to repeat sudo
 USER root
 
-# Set version environment variables
+# renovate: datasource=github-tags name=github.com/gradle/gradle
 ENV GRADLE_VERSION="8.3"
+
+# renovate: datasource=github-tags name=github.com/apache/maven
 ENV MAVEN_VERSION="3.9.4"
 
-# install required things
 RUN DEBIAN_FRONTEND="noninteractive" apt install -y wget libarchive-tools
-
-# Install Temurin JDK 20
 RUN wget -O - https://packages.adoptium.net/artifactory/api/gpg/key/public | sudo apt-key add -
 
 # force it to use the Kinetic repository until it supports 23.04
 RUN echo "deb https://packages.adoptium.net/artifactory/deb kinetic main" | sudo tee /etc/apt/sources.list.d/adoptium.list
 RUN DEBIAN_FRONTEND="noninteractive" apt update && \
   DEBIAN_FRONTEND="noninteractive" apt install -y temurin-20-jdk
 
-# Install packages!
 RUN GRADLE_DOWNLOAD_URL="https://services.gradle.org/distributions/gradle-${GRADLE_VERSION}-all.zip"; \
   MAVEN_DOWNLOAD_URL="https://dlcdn.apache.org/maven/maven-3/${MAVEN_VERSION}/binaries/apache-maven-${MAVEN_VERSION}-bin.tar.gz"; \
   mkdir -p /opt/gradle; \
@@ -51,7 +47,6 @@ RUN GRADLE_DOWNLOAD_URL="https://services.gradle.org/distributions/gradle-${GRAD
 
 RUN chmod +x /opt/gradle/bin/gradle
 
-# Go back as the user
 USER ${USERNAME}
 
 ENV PATH=$PATH:/opt/maven/bin:/opt/gradle/bin

images/node/Dockerfile

@@ -24,6 +24,8 @@ FROM ghcr.io/auguwu/coder-images/base
 ENV USERNAME=noel
 
 USER root
+
+# renovate: datasource=github-tags name=github.com/nodejs/node
 ENV NODE_VERSION="20.5.1"
 
 RUN set -eux;                                                                                                      \

images/rust/Dockerfile

@@ -22,18 +22,15 @@
 FROM ghcr.io/auguwu/coder-images/base
 
 ENV USERNAME=noel
-
-# Run as root so we don't have to repeat sudo
 USER root
 
-# rust version to install
+# renovate: datasource=github-tags name=github.com/rust-lang/rustup
 ENV RUSTUP_VERSION="1.26.0"
+
+# renovate: datasource=github-tags name=github.com/rust-lang/rust
 ENV RUST_VERSION="1.71.1"
 
-# Install the Rust (minimal) toolchain
 RUN apt install -y --no-install-recommends ca-certificates gcc libc6-dev
-
-# We need to install Rust on the user so it can properly add it to the path.
 USER ${USERNAME}
 
 RUN set -eux; \

renovate.json

@@ -1,4 +1,18 @@
 {
     "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-    "extends": ["config:base"]
+    "extends": ["config:base"],
+    "automerge": true,
+    "automergeSchedule": ["at any time"],
+    "timezone": "America/Los_Angeles",
+    "enabledManagers": ["github-tags", "terraform", "github-actions"],
+    "vulnerabilityAlerts": {
+        "labels": ["security"]
+    },
+    "regexManagers": [
+        {
+            "description": "Allow updating software versions in Dockerfiles",
+            "fileMatch": ["Dockerfile$"],
+            "matchStrings": ["datasource=(?<datasource>.*?) name=(?<depName>.*?)\\sENV \\w+_VERSION=\"(?<currentValue>.*)\""]
+        }
+    ]
 }