Merge branch 'next'

* fix: change to automated releases

* fix(ci): fix issues with publishing Docker image

* fix(ci): correct reference to previous CI job

.github/workflows/ci.yml

@@ -1,7 +1,5 @@
 name: CI
 on:
-  push:
-    branches: [main]
   pull_request:
     types: [opened, synchronize, reopened]
     paths-ignore:
@@ -16,8 +14,10 @@ jobs:
     uses: luketainton/gha-workflows/.github/workflows/ci-python.yml@main
     secrets:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+      SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
   
   dockerci:
     uses: luketainton/gha-workflows/.github/workflows/ci-docker.yml@main
     secrets:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+      SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

.github/workflows/docker.yml

@@ -1,19 +0,0 @@
-name: Build
-on:
-  push:
-    branches: [main]
-
-jobs:
-  build:
-    name: GitHub Container Registry
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-      - name: Login to GitHub Container Registry
-        run: echo ${{ secrets.GHCR_ACCESS_TOKEN }} | docker login ghcr.io -u luketainton --password-stdin
-      - name: Build image for GitHub Package Registry
-        run: docker build . --file Dockerfile --tag ghcr.io/luketainton/roboluke-tasks:${{ github.sha }} --tag ghcr.io/luketainton/roboluke-tasks:latest
-      - name: Push image to GitHub Package Registry
-        run: |
-          docker push ghcr.io/luketainton/roboluke-tasks:latest
-          docker push ghcr.io/luketainton/roboluke-tasks:${{ github.sha }}

.github/workflows/release.yml

@@ -0,0 +1,52 @@
+name: Build
+on:
+  push:
+    branches: [main]
+
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    outputs:
+      new_tag: ${{ steps.tag_version.outputs.new_tag }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Bump version and push tag
+        id: tag_version
+        uses: mathieudutour/github-tag-action@v6.1
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          default_bump: minor
+      - name: Create a GitHub release
+        uses: ncipollo/release-action@v1
+        with:
+          tag: ${{ steps.tag_version.outputs.new_tag }}
+          name: ${{ steps.tag_version.outputs.new_tag }}
+          body: ${{ steps.tag_version.outputs.changelog }}
+
+  publish:
+    name: GitHub Container Registry
+    runs-on: ubuntu-latest
+    needs: release
+    steps:
+      - uses: actions/checkout@v4
+      - name: Login to GitHub Container Registry
+        run: echo ${{ secrets.GHCR_ACCESS_TOKEN }} | docker login ghcr.io -u luketainton --password-stdin
+      - name: Build image for GitHub Package Registry
+        run: docker build . --file Dockerfile --tag ghcr.io/luketainton/roboluke-tasks:${{ needs.release.outputs.new_tag }} --tag ghcr.io/luketainton/roboluke-tasks:latest
+      - name: Push image to GitHub Package Registry
+        run: |
+          docker push ghcr.io/luketainton/roboluke-tasks:latest
+          docker push ghcr.io/luketainton/roboluke-tasks:${{ needs.release.outputs.new_tag }}
+
+  deploy:
+    name: Update Portainer Deployment
+    runs-on: ubuntu-latest
+    needs: publish
+    steps:
+      - uses: fjogeleit/http-request-action@v1
+        with:
+          url: ${{ secrets.PORTAINER_WEBHOOK_URL }}
+          method: POST
+          timeout: 30000
+          preventFailureOnNoResponse: "true"

renovate.json

@@ -1,6 +1,11 @@
 {
   "extends": [
-    "config:base"
+    "config:base",
+    ":semanticCommits",
+    ":semanticCommitTypeAll(fix)"
+  ],
+  "baseBranches": [
+    "next"
   ],
   "platformCommit": true,
   "dependencyDashboardAutoclose": true,

requirements.txt

@@ -1,28 +1,28 @@
 appdirs==1.4.4
-astroid==3.0.1
+astroid==3.0.2
 attrs==23.1.0
 autopep8==2.0.4
 backoff==2.2.1
-certifi==2023.7.22
+certifi==2023.11.17
 cfgv==3.4.0
-charset-normalizer==3.3.0
+charset-normalizer==3.3.2
 click==8.1.7
 coloredlogs==15.0.1
 dill==0.3.7
-distlib==0.3.7
-filelock==3.12.4
+distlib==0.3.8
+filelock==3.13.1
 future==0.18.3
 humanfriendly==10.0
-identify==2.5.30
-idna==3.4
+identify==2.5.33
+idna==3.6
 iniconfig==2.0.0
-lazy-object-proxy==1.9.0
+lazy-object-proxy==1.10.0
 mccabe==0.7.0
 mypy-extensions==1.0.0
 nodeenv==1.8.0
 packaging==23.2
-pathspec==0.11.2
-platformdirs==3.11.0
+pathspec==0.12.1
+platformdirs==4.1.0
 pluggy==1.3.0
 py==1.11.0
 pycodestyle==2.11.1
@@ -36,11 +36,11 @@ requests-toolbelt==1.0.0
 six==1.16.0
 toml==0.10.2
 tomli==2.0.1
-tomlkit==0.12.1
-urllib3==2.0.7
-virtualenv==20.24.5
+tomlkit==0.12.3
+urllib3==2.1.0
+virtualenv==20.25.0
 webex-bot==0.4.1
 webexteamssdk==1.6.1
 websockets==10.2
-wrapt==1.15.0
+wrapt==1.16.0
 xmltodict==0.13.0