From 8040ef775fe3dbafa81728000fcdff72798efbaa Mon Sep 17 00:00:00 2001
From: Ryan VanGundy <85766511+rmvangun@users.noreply.github.com>
Date: Wed, 19 Nov 2025 16:34:53 -0500
Subject: [PATCH 1/2] chore(deps): Fix renovate config

Signed-off-by: Ryan VanGundy <85766511+rmvangun@users.noreply.github.com>

Attempt regex fix

Signed-off-by: Ryan VanGundy <85766511+rmvangun@users.noreply.github.com>

Fix renovate attempt

Signed-off-by: Ryan VanGundy <85766511+rmvangun@users.noreply.github.com>

include currentDigest

Signed-off-by: Ryan VanGundy <85766511+rmvangun@users.noreply.github.com>
---
 .github/renovate.json | 15 ++++++---------
 1 file changed, 6 insertions(+), 9 deletions(-)

diff --git a/.github/renovate.json b/.github/renovate.json
index 35ee0ce41..60b93c0d7 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -149,14 +149,13 @@
         "/^.*\\.tfvars$/"
       ],
       "matchStrings": [
-        "\\s*#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s*depName=(?<depName>[^\\s]+)\\s*package=(?<package>[^\\s]+)(\\s+helmRepo=(?<helmRepo>[^\\s]+))?[^\\n]*\\n[^\\n]*(?<currentValue>v?\\d+\\.\\d+(\\.\\d+)?(-[a-zA-Z0-9]+)?)(@sha256:[a-f0-9]+)?",
+        "\\s*#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s*depName=(?<depName>[^\\s]+)\\s*package=(?<package>[^\\s]+)(\\s+helmRepo=(?<helmRepo>[^\\s]+))?[^\\n]*\\n[^:]*:\\s*(?<currentValue>v?\\d+\\.\\d+(\\.\\d+)?(-[a-zA-Z0-9]+)?)(?:@(?<currentDigest>sha256:[a-f0-9]+))?",
         "\\s*#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s*depName=(?<depName>[^\\s]+)\\s*package=(?<package>[^\\s]+)[^\\n]*\\n[^\\n]*image:\\s*[^:]+:(?<currentValue>[^\\s@]+)(@sha256:[a-f0-9]+)?"
       ],
       "versioningTemplate": "semver",
       "datasourceTemplate": "{{datasource}}",
       "packageNameTemplate": "{{package}}",
-      "depNameTemplate": "{{depName}}",
-      "pinDigests": true
+      "depNameTemplate": "{{depName}}"
     },
     {
       "description": "Handle date-based Docker image tags (e.g., trust-pkg-debian-bookworm)",
@@ -165,13 +164,12 @@
         "/^.*\\.ya?ml$/"
       ],
       "matchStrings": [
-        "\\s*#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s*depName=(?<depName>[^\\s]+)\\s*package=(?<package>[^\\s]+).*\\n.*tag:\\s*(?<currentValue>\\d{8}(-\\w+)?(@sha256:[a-f0-9]+)?)"
+        "\\s*#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s*depName=(?<depName>[^\\s]+)\\s*package=(?<package>[^\\s]+).*\\n[^:]*:\\s*(?<currentValue>\\d{8}(-[^@\\s]+)?)(@sha256:[a-f0-9]+)?"
       ],
       "versioningTemplate": "loose",
       "datasourceTemplate": "{{datasource}}",
       "packageNameTemplate": "{{package}}",
-      "depNameTemplate": "{{depName}}",
-      "pinDigests": true
+      "depNameTemplate": "{{depName}}"
     },
     {
       "description": "Handle complex date-based tags with controller versions (e.g., kube-webhook-certgen)",
@@ -180,13 +178,12 @@
         "/^.*\\.ya?ml$/"
       ],
       "matchStrings": [
-        "\\s*#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s*depName=(?<depName>[^\\s]+)\\s*package=(?<package>[^\\s]+).*\\n.*tag:\\s*(?<currentValue>v[0-9]{8}-controller-v[0-9]+\\.[0-9]+\\.[0-9]+-[0-9]+-g[0-9a-f]+(@sha256:[a-f0-9]+)?)"
+        "\\s*#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s*depName=(?<depName>[^\\s]+)\\s*package=(?<package>[^\\s]+).*\\n[^:]*:\\s*(?<currentValue>v[0-9]{8}-controller-v[0-9]+\\.[0-9]+\\.[0-9]+-[0-9]+-g[0-9a-f]+)(@sha256:[a-f0-9]+)?"
       ],
       "versioningTemplate": "loose",
       "datasourceTemplate": "{{datasource}}",
       "packageNameTemplate": "{{package}}",
-      "depNameTemplate": "{{depName}}",
-      "pinDigests": true
+      "depNameTemplate": "{{depName}}"
     }
   ],
   "platformAutomerge": true,

From 6491711ec54ccfe169a6d437c5a4350163a91375 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 19 Nov 2025 22:45:19 +0000
Subject: [PATCH 2/2] chore(deps): update ghcr.io/fluxcd/flux-cli docker tag to
 v2.7.3

---
 kustomize/telemetry/resources/prometheus/flux/helm-release.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kustomize/telemetry/resources/prometheus/flux/helm-release.yaml b/kustomize/telemetry/resources/prometheus/flux/helm-release.yaml
index 44c7403db..a12dbcaa9 100644
--- a/kustomize/telemetry/resources/prometheus/flux/helm-release.yaml
+++ b/kustomize/telemetry/resources/prometheus/flux/helm-release.yaml
@@ -18,7 +18,7 @@ spec:
   values:
     cli:
       # renovate: datasource=docker depName=ghcr.io/fluxcd/flux-cli package=ghcr.io/fluxcd/flux-cli
-      tag: v2.7.2@sha256:c10e77794dc4519322cbc58e75c7f612125e4276b726c6cb019d87e9dadb08dd
+      tag: v2.7.3@sha256:334f73637220fe587fcc8439f35a841c92c44d4695895fd04c77731bd418f14e
     prometheus:
       podMonitor:
         create: true