renovate 配置

Dockerfile

@@ -1,16 +1,17 @@
-FROM nginx:1.26.0-bookworm
+FROM nginx:1.26.0-bookworm@sha256:ba9587717b056e1993b051f71cea30ddd5caf09ae2087b1eeb11329f52468e49
 ARG DEBIAN_FRONTEND='noninteractive'
 
-# TODO: 配置 renovate 更新
-ARG S6_OVERLAY_VERSION=3.1.6.2
+# renovate: datasource=github-releases depName=just-containers/s6-overlay versioning=loose
+ARG S6_OVERLAY_VERSION=v3.1.6.2
 ARG S6_OVERLAY_BASE_URL=https://github.com/just-containers/s6-overlay/releases/download
 RUN set -x && \
     apt-get update && apt-get install -y xz-utils && \
-    curl --fail ${S6_OVERLAY_BASE_URL}/v${S6_OVERLAY_VERSION}/s6-overlay-noarch.tar.xz -SLo- | tar -C / -Jxpf - && \
-    curl --fail ${S6_OVERLAY_BASE_URL}/v${S6_OVERLAY_VERSION}/s6-overlay-`uname -m| sed 's/armv7l/armhf/g'`.tar.xz -SLo- | tar -C / -Jxpf - && \
+    curl --fail ${S6_OVERLAY_BASE_URL}/${S6_OVERLAY_VERSION}/s6-overlay-noarch.tar.xz -SLo- | tar -C / -Jxpf - && \
+    curl --fail ${S6_OVERLAY_BASE_URL}/${S6_OVERLAY_VERSION}/s6-overlay-`uname -m| sed 's/armv7l/armhf/g'`.tar.xz -SLo- | tar -C / -Jxpf - && \
     apt-get purge -y --auto-remove xz-utils
 
-COPY --from=fatedier/frps:v0.56.0 /usr/bin/frps /usr/bin/frps
+COPY --from=fatedier/frps:v0.56.0@sha256:bb3084abaf93d3f1b1c28e42e0fd2b67366cbe15db487ca4312488249fe569d9 \
+    /usr/bin/frps /usr/bin/frps
 COPY rootfs/ /
 COPY rootfs-s6-rc/ /
 

renovate.json

@@ -1,6 +1,10 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:recommended"
+    "config:recommended",
+    "group:allNonMajor",
+    ":automergeMinor",
+    "docker:pinDigests",
+    "regexManagers:dockerfileVersions"
   ]
-}
+}