Merge pull request 'chore(deps): pin dependencies' (#5) from renovate/pin-dependencies into main

Reviewed-on: #5

.gitea/workflows/release.yaml

@@ -0,0 +1,29 @@
+name: Release
+on:
+  push:
+    branches:
+      - main
+
+env:
+  GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+
+permissions:
+  contents: read # for checkout
+
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance
+    steps:
+      - name: Create Release
+        uses: https://git.kjan.de/actions/semantic-release@main
+        with:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+
+

action.yml

@@ -21,26 +21,26 @@ runs:
   using: "composite"
   steps:
     - name: Checkout
-      uses: https://git.kjan.de/actions/checkout@v4
+      uses: https://git.kjan.de/actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
     - name: Set up Docker Buildx
-      uses: https://git.kjan.de/actions/setup-buildx-action@v3
+      uses: https://git.kjan.de/actions/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3
 
     - name: Login to local Docker Registry
-      uses: https://git.kjan.de/actions/login-action@v3
+      uses: https://git.kjan.de/actions/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
       with:
         registry: git.kjan.de
         username: ${{ inputs.REGISTRY_USERNAME }}
         password: ${{ inputs.REGISTRY_TOKEN }}
 
     - name: Login to Docker.io Registry
-      uses: https://git.kjan.de/actions/login-action@v3
+      uses: https://git.kjan.de/actions/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
       with:
         username: ${{ inputs.DOCKER_USERNAME }}
         password: ${{ inputs.DOCKER_PASSWORD }}
 
     - name: Cache Docker layers
-      uses: actions/cache@v4
+      uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
       with:
         path: /tmp/.buildx-cache
         key: ${{ runner.os }}-${{ inputs.name }}-${{ github.sha }}
@@ -48,7 +48,7 @@ runs:
           ${{ runner.os }}-${{ inputs.name }}-                
 
     - name: Build and push
-      uses: https://git.kjan.de/actions/build-push-action@v6
+      uses: https://git.kjan.de/actions/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6
       with:
         cache-from: type=local,src=/tmp/.buildx-cache
         cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max

release.config.cjs

@@ -0,0 +1,13 @@
+module.exports = {
+
+  branches: ['main'],
+  plugins: [
+    '@semantic-release/commit-analyzer',
+    '@semantic-release/release-notes-generator',
+    '@semantic-release/changelog',
+      ["@saithodev/semantic-release-gitea", {
+      "giteaUrl": "https://git.kjan.de"
+    }],
+  ],
+};
+

renovate.json

@@ -0,0 +1,6 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "local>Renovate/renovate-config"
+  ]
+}