From 23ea6669065fc73237297182de672a0e9119a10c Mon Sep 17 00:00:00 2001
From: June <june@jsts.xyz>
Date: Thu, 30 Oct 2025 05:13:23 +0100
Subject: [PATCH] renovate(role): always pull and use full image source

Ensure we're always running the latest Renovate version.
---
 roles/renovate/files/renovate.service | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/roles/renovate/files/renovate.service b/roles/renovate/files/renovate.service
index 6cb8f16..52e64f5 100644
--- a/roles/renovate/files/renovate.service
+++ b/roles/renovate/files/renovate.service
@@ -6,7 +6,8 @@ Wants=network-online.target
 [Service]
 Type=oneshot
 ExecStart=/usr/bin/docker run --rm \
+    --pull=always \
     -v "/etc/renovate/config.js:/usr/src/app/config.js" \
     --mount "type=volume,src=renovate,dst=/tmp/renovate" \
     --env "RENOVATE_BASE_DIR=/tmp/renovate" \
-    renovate/renovate
+    docker.io/renovate/renovate:latest