Skip to content

Conversation

@renovate-sh-app
Copy link
Contributor

@renovate-sh-app renovate-sh-app bot commented Oct 20, 2025

This PR contains the following updates:

Package Type Update Change
actions/download-artifact action pinDigest -> 634f93c
actions/upload-artifact action pinDigest -> ea165f8
autoprefixer devDependencies pin ^10.4.21 -> 10.4.21
ghcr.io/grafana/grafana-operator (source) Kustomization pinDigest -> 0af2fae
ghcr.io/grafana/grafana-operator (source) Kustomization pinDigest -> 050174c
ghcr.io/grafana/grafana-operator (source) Kustomization pinDigest -> 34229f5
hashicorp/http-echo Kustomization pinDigest -> fcb75f6
postcss (source) devDependencies pin ^8.5.6 -> 8.5.6
postcss-cli devDependencies pin ^10.1.0 -> 10.1.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

| datasource | package      | from    | to      |
| ---------- | ------------ | ------- | ------- |
| npm        | autoprefixer | 10.4.21 | 10.4.21 |
| npm        | postcss      | 8.5.6   | 8.5.6   |
| npm        | postcss-cli  | 10.1.0  | 10.1.0  |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/pin-dependencies branch from c9b32d9 to 8be18a8 Compare October 20, 2025 21:06
Copy link
Collaborator

@Baarsgaard Baarsgaard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've verified the hashes suggested by renovate, but I question the need to add a hash to the kustomization files?
Should we ignore the newTags?

@theSuess
Copy link
Collaborator

For the config/manager path, it doesn't really matter as that's only used as a base for the OLM generation

For the deploy path, I'd need to take a look at the release process to see if we can automate this, otherwise we'll get pinged about this after every release

@theSuess theSuess closed this Nov 10, 2025
@theSuess theSuess changed the title chore(deps): pin dependencies chore(deps): pin dependencies RENAMED Nov 10, 2025
@Baarsgaard Baarsgaard deleted the renovate/pin-dependencies branch November 10, 2025 20:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants