feat: update ci configuration (#1580)

- Enable all Renovate managers
- Group more CI dependency updates
- Refactor Arduino custom manager to use the general custom_regex one

~

.github/renovate.json

@@ -7,44 +7,30 @@
     ]
   },
   "configMigration": true,
-  "enabledManagers": [
-    "ansible",
-    "ansible-galaxy",
-    "devcontainer",
-    "dockerfile",
-    "docker-compose",
-    "pip_requirements",
-    "pre-commit",
-    "custom.regex"
-  ],
+  "dependencyDashboardApproval": true,
   "extends": ["config:best-practices", ":semanticCommits"],
   "forkProcessing": "enabled",
   "gitAuthor": "github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
   "labels": ["dependencies"],
   "packageRules": [
     {
       "matchFileNames": ["config/ansible/**/requirements.yml"],
-      "groupName": "ansible"
+      "groupName": "ansible-requirements"
     },
     {
-      "matchFileNames": ["config/pre-commit/**"],
+      "matchFileNames": [
+        "config/pre-commit/**",
+        ".github/**",
+        "docker/release-please-commitlint/**",
+        "scripts/run-renovate.sh"
+      ],
       "groupName": "ci"
     }
   ],
   "pre-commit": {
     "enabled": true
   },
   "customManagers": [
-    {
-      "customType": "regex",
-      "fileMatch": ["^docker/arduino-cli/Dockerfile$"],
-      "matchStrings": [
-        "ARG ARDUINO_CLI_VERSION=\"(?<currentValue>\\d+\\.\\d+\\.\\d+)\\S*"
-      ],
-      "depNameTemplate": "arduino/arduino-cli",
-      "datasourceTemplate": "github-releases",
-      "extractVersionTemplate": "^(?<version>.*)$"
-    },
     {
       "customType": "regex",
       "description": "Update _VERSION variables in Dockerfiles, and shell scripts",
@@ -57,5 +43,6 @@
         "# renovate: datasource=(?<datasource>[a-z-]+?)(?: depName=(?<depName>.+?))? packageName=(?<packageName>.+?)(?: versioning=(?<versioning>[a-z-]+?))?\\s(?:ENV|ARG)?\\s*.+?_VERSION=\"?(?<currentValue>.+?)\"?\\s"
       ]
     }
-  ]
+  ],
+  "rangeStrategy": "bump"
 }

.github/workflows/lint.yaml

@@ -33,22 +33,6 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-  lint-script:
-    concurrency:
-      # Ref: https://docs.github.com/en/actions/learn-github-actions/contexts#github-context
-      # github.head_ref: head_ref or source branch of the pull request
-      # github.ref: ref of the branch that triggered the workflow
-      group: ${{ github.workflow }}-lint-script-${{ github.head_ref || github.ref }}-${{ github.event_name }}
-      cancel-in-progress: true
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: Run lint script
-        run: |
-          scripts/lint.sh
-
   pre_commit:
     concurrency:
       # Ref: https://docs.github.com/en/actions/learn-github-actions/contexts#github-context

.github/workflows/test-shell-scripts.yaml

@@ -2,8 +2,15 @@
 name: Test shell scripts
 
 on: # yamllint disable-line rule:truthy
-  push: null
-  pull_request: null
+  push:
+    paths:
+      - ".github/workflows/test-shell-scripts.yaml"
+      - "scripts/**"
+      - "test/scripts/**"
+  pull_request:
+    paths:
+      - "scripts/common.sh"
+      - "scripts/run-ansible.sh"
 
 permissions:
   contents: read
@@ -18,6 +25,8 @@ jobs:
       cancel-in-progress: true
     steps:
       - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - name: Run ${{ matrix.test_script_path }}
         run: |
           set -o errexit
@@ -27,4 +36,5 @@ jobs:
     strategy:
       matrix:
         test_script_path:
+          - scripts/lint.sh
           - test/scripts/build-python-venv-test.sh

docker/arduino-cli/Dockerfile

@@ -2,6 +2,7 @@ FROM debian:bullseye
 
 SHELL ["/bin/bash", "-o", "errexit", "-o", "nounset", "-o", "pipefail", "-c"]
 
+# renovate: datasource=github-releases packageName=arduino/arduino-cli versioning=semver-coerced
 ARG ARDUINO_CLI_VERSION="0.34.2"
 
 RUN apt-get update \