feat(helm)!: Update chart renovate-operator (4.7.1 → 5.6.0) - #2004
Open
ixxel-bot[bot] wants to merge 1 commit into
Open
feat(helm)!: Update chart renovate-operator (4.7.1 → 5.6.0)#2004ixxel-bot[bot] wants to merge 1 commit into
ixxel-bot[bot] wants to merge 1 commit into
Conversation
ixxel-bot
Bot
added
app/renovate-operator
env/genmachine
Contributor
Author
--- main/renovate-operator_gitops_manifests_renovate-operator_genmachine_manifest_main.yaml 2026-08-10 19:48:42.708787892 +0000
+++ pr/renovate-operator_gitops_manifests_renovate-operator_genmachine_manifest_pr.yaml 2026-08-10 19:48:39.195772246 +0000
@@ -15,21 +15,28 @@
name: renovatejobs.renovate-operator.mogenius.com
spec:
group: renovate-operator.mogenius.com
names:
kind: RenovateJob
listKind: RenovateJobList
plural: renovatejobs
singular: renovatejob
scope: Namespaced
versions:
- - name: v1alpha1
+ - additionalPrinterColumns:
+ - jsonPath: .spec.schedule
+ name: Schedule
+ type: string
+ - jsonPath: .spec.provider.name
+ name: Provider
+ type: string
+ name: v1alpha1
schema:
openAPIV3Schema:
properties:
apiVersion:
description: |-
APIVersion defines the versioned schema of this representation of an object.
Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
@@ -3144,20 +3151,39 @@
description: volumePath is the path that identifies vSphere
volume vmdk
type: string
required:
- volumePath
type: object
required:
- name
type: object
type: array
+ githubAppReference:
+ description: |-
+ Reference to a Github App for authentication, this will automatically mount a secret with
+ RENOVATE_TOKEN
+ properties:
+ appIdSecretKey:
+ type: string
+ installationIdSecretKey:
+ type: string
+ pemSecretKey:
+ type: string
+ secretName:
+ type: string
+ required:
+ - appIdSecretKey
+ - installationIdSecretKey
+ - pemSecretKey
+ - secretName
+ type: object
image:
description: Renovate Docker image to use
type: string
imagePullSecrets:
description: Image pull secrets for the renovate pods
items:
description: |-
LocalObjectReference contains enough information to let you locate the
referenced object inside the same namespace.
properties:
@@ -3187,28 +3213,38 @@
type: object
nodeSelector:
additionalProperties:
type: string
description: Node selector for scheduling the resulting pod
type: object
parallelism:
description: Maximum number of projects to process in parallel
format: int32
type: integer
+ priorityClassName:
+ description: PriorityClassName for the resulting pod, used to set
+ the pod's scheduling priority.
+ type: string
provider:
description: Renovate Provider Information to fill "RENOVATE_ENDPOINT"
and "RENOVATE_PLATFORM" environment variables in the renovate container
properties:
endpoint:
type: string
name:
type: string
+ publicEndpoint:
+ description: |-
+ PublicEndpoint is the externally reachable URL for the provider, used only for UI links.
+ When set, this overrides Endpoint for dashboard links while Endpoint continues to be
+ used for Renovate API calls and cloning. Defaults to Endpoint when omitted.
+ type: string
required:
- name
type: object
resources:
description: Resource requirements for the renovate container
properties:
claims:
description: |-
Claims lists the names of resources, defined in spec.resourceClaims,
that are used by this container.
@@ -3257,20 +3293,24 @@
- type: string
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
description: |-
Requests describes the minimum amount of compute resources required.
If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
otherwise to an implementation-defined value. Requests cannot exceed Limits.
More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
type: object
type: object
+ runtimeClassName:
+ description: RuntimeClassName for the resulting pod, used to select
+ a non-default container runtime
+ type: string
schedule:
description: Cron schedule in standard cron format
type: string
scratchVolume:
description: Configuration for the scratch volume
properties:
enabled:
default: true
description: If enabled a scratch volume will be created and RENOVATE_BASE_DIR
will be set accordingly
@@ -3979,20 +4019,25 @@
properties:
automountServiceAccountToken:
type: boolean
name:
type: string
type: object
skipForks:
description: If true, forked repositories discovered during autodiscovery
will be excluded by querying the platform API
type: boolean
+ skipPendingDeletion:
+ description: If true, repositories marked for delayed deletion (pending
+ deletion) will be excluded by querying the platform API. Only GitLab
+ exposes this state.
+ type: boolean
tolerations:
description: Tolerations for scheduling the resulting pod
items:
description: |-
The pod this Toleration is attached to tolerates any taint that matches
the triple <key,value,effect> using the matching operator <operator>.
properties:
effect:
description: |-
Effect indicates the taint effect to match. Empty means match all taint effects.
@@ -4213,85 +4258,82 @@
description: reference to a secret and key
properties:
key:
type: string
name:
type: string
type: object
required:
- enabled
type: object
+ baseUrl:
+ description: |-
+ Externally reachable base URL of the operator's webhook server for this
+ job, e.g. https://renovate.example.com. The platform-specific path is
+ appended to it. Takes precedence over the operator-wide
+ WEBHOOK_BASE_URL environment variable, which is used when this is empty.
+ Set it when a platform needs a different hostname to reach the operator
+ than the operator-wide default provides.
+ pattern: ^https?://[^?#]+$
+ type: string
enabled:
type: boolean
- forgejo:
- description: Forgejo-specific webhook configuration
+ sync:
+ description: |-
+ configuration for syncing webhooks onto the repositories discovered for this
+ job.
properties:
- sync:
- description: configuration for syncing webhooks to Forgejo
- repos by topic
+ enabled:
+ description: Flag to enable the automatic repo webhook sync
+ type: boolean
+ secretRef:
+ description: |-
+ Optional reference to a secret key holding the platform token used for
+ webhook management. When not set, the job's platform token
+ (spec.secretRef or spec.githubAppReference) is used. If key is empty,
+ the common Renovate token key names are tried.
properties:
- authTokenSecretRef:
- description: reference to a secret and key
- properties:
- key:
- type: string
- name:
- type: string
- type: object
- enabled:
- type: boolean
- events:
- items:
- type: string
- type: array
- tokenSecretRef:
- description: reference to a secret and key
- properties:
- key:
- type: string
- name:
- type: string
- type: object
- topic:
+ key:
type: string
- webhookURL:
+ name:
type: string
- required:
- - enabled
- - webhookURL
type: object
+ required:
+ - enabled
type: object
required:
- enabled
type: object
required:
- image
- parallelism
- provider
- schedule
type: object
status:
description: RenovateJobStatus defines the observed state of RenovateJob
properties:
executionOptions:
properties:
debug:
- description: If true, the renovate job will be executed with LOG_LEVEL=debug
+ description: If true, the renovate job will be executed with RENOVATE_LOG_LEVEL=debug
type: boolean
type: object
projects:
items:
description: Status of a single project within a RenovateJob
properties:
duration:
type: string
- lastRun:
+ lastTransition:
+ description: LastTransition records when the project most recently
+ changed state.
format: date-time
type: string
logIssues:
description: LogIssues contains aggregate counts and individual
issue messages from a Renovate run.
properties:
errorCount:
type: integer
issues:
items:
@@ -4361,21 +4403,20 @@
- updated
type: object
priority:
format: int32
type: integer
renovateResultStatus:
type: string
status:
type: string
required:
- - lastRun
- name
- status
type: object
type: array
type: object
type: object
served: true
storage: true
subresources:
status: {}
@@ -4392,31 +4433,33 @@
verbs: ["get", "list", "watch", "update", "patch"]
# Allow create, get, list, update, delete on pods
- apiGroups: [""]
resources: ["pods"]
verbs: ["create", "get", "list", "watch", "update", "delete"]
# Allow create, get, list, update, delete on jobs
- apiGroups: ["batch"]
resources: ["jobs"]
- verbs: ["create", "get", "list", "watch", "update", "delete"]
+ verbs: ["create", "get", "list", "watch", "update", "delete", "patch"]
# Allow log access from pods
- apiGroups: [""]
resources: ["pods/log"]
verbs: ["get", "list"]
- # Allow reading secrets for webhook token and github app integration
+ # Read platform/webhook tokens by name; create and update the github app token
+ # and valkey url secrets. No list/watch: Secrets bypass the informer cache, so a
+ # single grant here would otherwise expose every secret value in the cluster.
- apiGroups: [""]
resources: ["secrets"]
- verbs: ["create", "get", "list", "watch", "update", "delete"]
+ verbs: ["get", "create", "update"]
---
# Source: renovate-operator/charts/renovate-operator/templates/clusterrole/clusterrolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: renovate-operator-renovate-operator
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: renovate-operator-renovate-operator
@@ -4473,21 +4516,21 @@
type: RuntimeDefault
tolerations:
- effect: NoSchedule
key: node-role.kubernetes.io/control-plane
operator: Exists
- effect: NoExecute
key: node-role.kubernetes.io/control-plane
operator: Exists
containers:
- name: renovate-operator
- image: ghcr.io/mogenius/renovate-operator:4.7.1
+ image: ghcr.io/mogenius/renovate-operator:5.6.0
imagePullPolicy: IfNotPresent
args:
- "--zap-log-level=info"
- "--zap-encoder=json"
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
@@ -4517,20 +4560,22 @@
- name: JOB_TTL_SECONDS_AFTER_FINISHED
value: "86400"
- name: IMAGE_PULL_SECRETS
value: "[]"
- name: SERVER_PORT
value: "8081"
- name: VALKEY_FORWARD_CACHE_TO_JOBS
value: "true"
- name: GLOBAL_PARALLELISM_LIMIT
value: "0"
+ - name: POD_LABEL_TEMPLATES
+ value: "{}"
- name: LOG_STORE_MODE
value: "disabled"
ports:
- containerPort: 8081
name: http
protocol: TCP
- containerPort: 8080
name: metrics
protocol: TCP
---
|
ixxel-bot
Bot
force-pushed
the
renovate/major-5-renovate-operator-genmachine
branch
10 times, most recently
from
July 18, 2026 11:12
1f0cb44 to
83c2377
Compare
ixxel-bot
Bot
changed the title
ixxel-bot
Bot
changed the title
ixxel-bot
Bot
force-pushed
the
renovate/major-5-renovate-operator-genmachine
branch
9 times, most recently
from
July 22, 2026 05:56
8015a0b to
76dcabb
Compare
ixxel-bot
Bot
changed the title
ixxel-bot
Bot
force-pushed
the
renovate/major-5-renovate-operator-genmachine
branch
from
July 27, 2026 03:42
e15977b to
9c043a4
Compare
ixxel-bot
Bot
changed the title
ixxel-bot
Bot
changed the title
ixxel-bot
Bot
force-pushed
the
renovate/major-5-renovate-operator-genmachine
branch
3 times, most recently
from
July 28, 2026 08:56
4136af1 to
63b2649
Compare
ixxel-bot
Bot
changed the title
ixxel-bot
Bot
force-pushed
the
renovate/major-5-renovate-operator-genmachine
branch
11 times, most recently
from
August 1, 2026 00:21
09e7d11 to
d6672cc
Compare
ixxel-bot
Bot
changed the title
ixxel-bot
Bot
changed the title
ixxel-bot
Bot
force-pushed
the
renovate/major-5-renovate-operator-genmachine
branch
2 times, most recently
from
August 1, 2026 01:44
d6672cc to
6d719a8
Compare
ixxel-bot
Bot
changed the title
ixxel-bot
Bot
changed the title
| datasource | package | from | to | | ---------- | ----------------- | ----- | ----- | | helm | renovate-operator | 4.7.1 | 5.6.0 | Co-authored-by: renovate[bot] <renovate@whitesourcesoftware.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.7.1→5.6.0Release Notes
mogenius/renovate-operator (renovate-operator)
v5.6.0Compare Source
Features
Bug Fixes
v5.5.0Compare Source
Features
Bug Fixes
v5.4.0Compare Source
Features
Bug Fixes
v5.3.0Compare Source
Features
Bug Fixes
v5.2.0Compare Source
Features
Bug Fixes
v5.1.0Compare Source
Features
Bug Fixes
v5.0.1Compare Source
Bug Fixes
v5.0.0Compare Source
⚠ BREAKING CHANGES
Features
Bug Fixes
v4.14.1Compare Source
Bug Fixes
v4.14.0Compare Source
Features
Bug Fixes
v4.13.0Compare Source
Features
Bug Fixes
v4.12.4Compare Source
Bug Fixes
v4.12.3Compare Source
Bug Fixes
v4.12.2Compare Source
Bug Fixes
v4.12.1Compare Source
Bug Fixes
v4.12.0Compare Source
Features
Bug Fixes
v4.11.0Compare Source
Features
Bug Fixes
v4.10.1Compare Source
Bug Fixes
v4.10.0Compare Source
Features
Bug Fixes
v4.9.0Compare Source
Features
Bug Fixes
v4.8.1Compare Source
Bug Fixes
v4.8.0Compare Source
Bug Fixes
Features
Configuration
📅 Schedule: (in timezone Europe/Paris)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.