From 247cb031f2e97b608489d6174bf0da1f884f3769 Mon Sep 17 00:00:00 2001
From: Max <max@catcatgo.de>
Date: Fri, 21 Aug 2026 13:53:47 +0200
Subject: [PATCH 1/3] auto update patch versions

---
 renovate.json | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/renovate.json b/renovate.json
index 8139008f..94317fc3 100644
--- a/renovate.json
+++ b/renovate.json
@@ -29,13 +29,17 @@
     // https://docs.renovatebot.com/presets-default/#automergestablenonmajor
     {
       "groupName": "all stable non-major dependencies",
-      "groupSlug": "all-stable-minor-patch",
+      "groupSlug": "all-stable-minor",
       "matchCurrentVersion": "!/^0/",
       "matchUpdateTypes": [
-        "minor",
-        "patch"
+        "minor"
       ]
     },
+    {
+      "matchUpdateTypes": ["patch"],
+      "matchCurrentVersion": "!/^0/",
+      "automerge": true
+    },
     {
       "matchDatasources": ["docker"],
       "matchPackageNames": ["docker.io/pretix/standalone"],

From 39d95a7b9f22191fb444532d9776e0d53df9bbb2 Mon Sep 17 00:00:00 2001
From: Max <max@catcatgo.de>
Date: Fri, 21 Aug 2026 13:54:19 +0200
Subject: [PATCH 2/3] except keycloak from grouped update PRs

keycloak is a critical service
separating keycloak updates makes it easier to respond quickly to
critical updates or delay them when there are breaking changes
---
 renovate.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/renovate.json b/renovate.json
index 94317fc3..d36e7fef 100644
--- a/renovate.json
+++ b/renovate.json
@@ -33,6 +33,9 @@
       "matchCurrentVersion": "!/^0/",
       "matchUpdateTypes": [
         "minor"
+      ],
+      "excludePackageNames": [
+        "git.hamburg.ccc.de/ccchh/oci-images/keycloak"
       ]
     },
     {

From 0ef631a3182d16e0ef3b588a0ff8ad783aa5fbf7 Mon Sep 17 00:00:00 2001
From: Renovate <no-reply@git.hamburg.ccc.de>
Date: Fri, 4 Sep 2026 00:17:41 +0000
Subject: [PATCH 3/3] Update docker.io/library/postgres Docker tag to v16

---
 inventories/chaosknoten/host_vars/cloud.yaml                 | 2 +-
 resources/chaosknoten/lists/docker_compose/compose.yaml.j2   | 2 +-
 resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2 | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/inventories/chaosknoten/host_vars/cloud.yaml b/inventories/chaosknoten/host_vars/cloud.yaml
index 8f299b2d..844cf1bf 100644
--- a/inventories/chaosknoten/host_vars/cloud.yaml
+++ b/inventories/chaosknoten/host_vars/cloud.yaml
@@ -1,7 +1,7 @@
 # renovate: datasource=docker depName=git.hamburg.ccc.de/ccchh/oci-images/nextcloud
 nextcloud__version: 34
 # renovate: datasource=docker depName=docker.io/library/postgres
-nextcloud__postgres_version: 15.18
+nextcloud__postgres_version: 16.15
 nextcloud__fqdn: cloud.hamburg.ccc.de
 nextcloud__data_dir: /data/nextcloud
 nextcloud__extra_configuration: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/cloud/nextcloud/extra_configuration.config.php.j2') }}"
diff --git a/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 b/resources/chaosknoten/lists/docker_compose/compose.yaml.j2
index 7a109e8c..df6acaa6 100644
--- a/resources/chaosknoten/lists/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/lists/docker_compose/compose.yaml.j2
@@ -62,7 +62,7 @@ services:
       - POSTGRES_DB=mailmandb
       - POSTGRES_USER=mailman
       - "POSTGRES_PASSWORD={{ secret__lists__postgres_password }}"
-    image: docker.io/library/postgres:12-alpine
+    image: docker.io/library/postgres:16-alpine
     volumes:
       - /opt/mailman/database:/var/lib/postgresql/data
     networks:
diff --git a/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2 b/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2
index 3c6e5daa..2a01e92c 100644
--- a/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2
@@ -3,7 +3,7 @@
 
 services:
   database:
-    image: docker.io/library/postgres:15-alpine
+    image: docker.io/library/postgres:16-alpine
     environment:
       - "POSTGRES_USER=pretalx"
       - "POSTGRES_PASSWORD={{ secret__pretalx_db_password }}"