fix(docker): update CADDY_IMAGE to track Debian base image digest for enhanced security

2026-01-30 02:16:06 +00:00
parent ac5d819996
commit c81503fb0a
2 changed files with 6 additions and 5 deletions
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -47,13 +47,14 @@
    },
    {
      "customType": "regex",
-      "description": "Track Debian base image in Dockerfile",
+      "description": "Track Debian base image digest in Dockerfile for security updates",
      "managerFilePatterns": ["/^Dockerfile$/"],
      "matchStrings": [
-        "ARG CADDY_IMAGE=debian:(?<currentValue>[\\w.-]+)"
+        "#\\s*renovate:\\s*datasource=docker\\s+depName=debian.*\\nARG CADDY_IMAGE=debian:(?<currentValue>trixie-slim@sha256:[a-f0-9]+)"
      ],
      "depNameTemplate": "debian",
-      "datasourceTemplate": "docker"
+      "datasourceTemplate": "docker",
+      "versioningTemplate": "docker"
    }
  ],