.forgejo/workflows/build_keycloak.yml

@@ -2,10 +2,7 @@ name: Build Keycloak
 
 on:
   workflow_dispatch: {}
-  push:
+  push: {}
-    paths:
-      - '.forgejo/workflows/build_keycloak.yml'
-      - 'keycloak/**'
   schedule:
     - cron: "@daily"
 
@@ -17,15 +14,14 @@ jobs:
       image: ghcr.io/osscontainertools/kaniko:alpine
     strategy:
       matrix:
-        keycloak-version:
          # renovate: datasource=docker depName=quay.io/keycloak/keycloak
-          - 26.7.4
+        keycloak-version: [ 26.6.1, 26.6.2, 26.6.3 ]
     steps:
       - name: Install required system packages
         run: apk add --no-cache nodejs
 
       - name: Checkout Source Code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
 
       - name: Build Container
         env:

.forgejo/workflows/build_nextcloud.yml

@@ -2,10 +2,7 @@ name: Build Nextcloud
 
 on:
   workflow_dispatch: {}
-  push:
+  push: {}
-    paths:
-      - '.forgejo/workflows/build_nextcloud.yml'
-      - 'nextcloud/**'
   schedule:
     - cron: "@daily"
 
@@ -17,41 +14,21 @@ jobs:
       image: ghcr.io/osscontainertools/kaniko:alpine
     strategy:
       matrix:
-        nextcloud-version:
+        nextcloud-version: [ 33, 34 ]
-          # renovate: datasource=docker depName=docker.io/library/nextcloud
-          - 34
     steps:
       - name: Install required system packages
-        run: apk add --no-cache nodejs git
+        run: apk add --no-cache nodejs
 
-      - name: Checkout source code
+      - name: Checkout Source Code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
 
-      - name: Checkout nextcloud/docker
+      - name: Build Container
-        run: git clone --depth 1 https://github.com/nextcloud/docker.git nextcloud-docker
-
-      - name: Build base Nextcloud image
         env:
           KANIKO_NO_PUSH: ${{ forgejo.ref_name != 'main' }}
           KANIKO_GIT_HAMBURG_CCC_DE_USER: forgejo-actions
           KANIKO_GIT_HAMBURG_CCC_DE_PASSWORD: ${{ secrets.PACKAGES_TOKEN }}
         run: /kaniko/executor
-          --dockerfile="${{ forgejo.workspace }}/nextcloud-docker/${{ matrix.nextcloud-version }}/apache/Dockerfile" 
+          --dockerfile="${{forgejo.workspace }}/nextcloud/Containerfile"
-          --context="dir://${{ forgejo.workspace }}/nextcloud-docker/${{ matrix.nextcloud-version }}/apache"
-          --build-arg=TAG=${{ matrix.nextcloud-version }}
-          --destination=git.hamburg.ccc.de/ccchh/oci-images/nextcloud-base:${{ matrix.nextcloud-version }}
-          --no-push-cache
-          --credential-helpers=env
-          --annotation=org.opencontainers.image.ref.name=nextcloud-base
-          --annotation=org.opencontainers.image.source=${{ forgejo.server_url }}/${{ forgejo.repository }}
-
-      - name: Build extended image
-        env:
-          KANIKO_NO_PUSH: ${{ forgejo.ref_name != 'main' }}
-          KANIKO_GIT_HAMBURG_CCC_DE_USER: forgejo-actions
-          KANIKO_GIT_HAMBURG_CCC_DE_PASSWORD: ${{ secrets.PACKAGES_TOKEN }}
-        run: /kaniko/executor
-          --dockerfile="${{ forgejo.workspace }}/nextcloud/Containerfile"
           --context="dir://${{ forgejo.workspace }}/nextcloud"
           --build-arg=TAG=${{ matrix.nextcloud-version }}
           --destination=git.hamburg.ccc.de/ccchh/oci-images/nextcloud:${{ matrix.nextcloud-version }}

.forgejo/workflows/build_penpot.yml

@@ -2,9 +2,7 @@ name: Build Penpot
 
 on:
   workflow_dispatch: {}
-  push:
+  push: {}
-    paths:
-      - '.forgejo/workflows/build_penpot.yml'
   schedule:
     - cron: "@daily"
 

keycloak/Containerfile

@@ -1,6 +1,6 @@
 ARG TAG=latest
 
-FROM debian:13-slim as attribute-endpoints-provider-builder
+FROM debian:12-slim as attribute-endpoints-provider-builder
 
 RUN apt-get update \
     && apt-get install --no-install-recommends --no-install-suggests -y maven git \

nextcloud/Containerfile

@@ -1,5 +1,5 @@
-ARG TAG
+ARG TAG=latest
-FROM git.hamburg.ccc.de/ccchh/oci-images/nextcloud-base:${TAG}
+FROM docker.io/library/nextcloud:${TAG}
 
 RUN apt-get update \
     && apt-get install -y supervisor \

renovate.json

@@ -3,21 +3,12 @@
   "extends": [
     "config:recommended"
   ],
-  "packageRules": [
-    // Automatically merge patch level updates
-    // https://docs.renovatebot.com/key-concepts/automerge/
-    {
-      "matchUpdateTypes": ["minor", "patch"],
-      "matchCurrentVersion": "!/^0/",
-      "automerge": true
-    }
-  ],
   "customManagers": [
-    // Custom manager using regex for letting Renovate find dependencies in matrix variables
+    // Custom manager using regex for letting Renovate find dependencies in woodpecker Matrix variables.
     {
       "customType": "regex",
       "managerFilePatterns": [
-        "/^\\.forgejo/workflows/.*\\.ya?ml$/"
+        "/^\\.woodpecker/.*\\.ya?ml$/"
       ],
       "matchStrings": [
         "# renovate: datasource=(?<datasource>[a-zA-Z0-9-._]+?) depName=(?<depName>[^\\s]+?)(?: packageName=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[^\\s]+?))?\\s*-\\s*[\"']?(?<currentValue>.+?)[\"']?\\s"