refactor!: rework deploy/renovate as composite actions with validated targets - #162

Merged

ineedjet merged 22 commits into

mainfrom

feat/renovate-folder-prototype

Aug 28, 2026

Commits on Aug 28, 2026

feat: prototype a folder-driven renovate workflow (#121)
ineedjet
committed
b9a5033
refactor: split renovate into a thin trigger + a shared reusable workflow
ineedjet
committed
bcce474
refactor: compute renovate's target matrix inside renovate-shared.yml
ineedjet
committed
f0dfce2
feat: notify Telegram when renovate actually finds an updated image
ineedjet
committed
980456a
refactor: move renovate's matrix and secret resolution out of secrets: inherit
ineedjet
committed
16ddbb6
refactor: pass renovate a target manifest path instead of flattened fields
ineedjet
committed
c871b2f
refactor!: pass deploy a target manifest path instead of flattened fields
ineedjet
committed
aeb7957
refactor!: flatten target credentials, add validating load-targets-matrix
ineedjet
committed
ce6863c
feat: renovate accepts a comma-separated list of apps, not just one
ineedjet
committed
5986207
refactor: pass renovate's apps as a JSON array instead of comma-separated
ineedjet
committed
ee3b6d3
refactor!: rename load-yaml-matrix to load-vaults-matrix, default directory
ineedjet
committed
e111afd
refactor!: replace deploy-shared.yml/renovate-shared.yml with composite actions
ineedjet
committed
6f7293b
refactor: rename renovate.yml's find-targets job to load-targets
ineedjet
committed
4ab0755
refactor: rename deploy-targets job to load-targets in deploy.yml/release.yml
ineedjet
committed
0b784e7
refactor: rename encrypt-vaults job to load-vaults in release.yml
ineedjet
committed
739d80c
refactor: drop --user --break-system-packages from deploy/renovate's pip install
ineedjet
committed
9c0d4a7
refactor: move Telegram notification out of the renovate action
ineedjet
committed
035f371
feat: notify Telegram after a successful deploy
ineedjet
committed
07975d4
refactor!: drop deploy.yml's target input and load-*-matrix's name filter
ineedjet
committed
4797067
refactor: have release.yml call deploy.yml instead of duplicating it
ineedjet
committed
e7eb5f1
feat: renovate everything nightly on a schedule
ineedjet
committed
e8773ec
feat: minimally validate vault manifests in load-vaults-matrix
ineedjet
committed
ea992e9

Navigation Menu

Uh oh!

refactor!: rework deploy/renovate as composite actions with validated targets - #162

refactor!: rework deploy/renovate as composite actions with validated targets#162
ineedjet merged 22 commits into
mainfrom
feat/renovate-folder-prototype

Commits on Aug 28, 2026

feat: prototype a folder-driven renovate workflow (#121)

refactor: split renovate into a thin trigger + a shared reusable workflow

refactor: compute renovate's target matrix inside renovate-shared.yml

feat: notify Telegram when renovate actually finds an updated image

refactor: move renovate's matrix and secret resolution out of secrets: inherit

refactor: pass renovate a target manifest path instead of flattened fields

refactor!: pass deploy a target manifest path instead of flattened fields

refactor!: flatten target credentials, add validating load-targets-matrix

feat: renovate accepts a comma-separated list of apps, not just one

refactor: pass renovate's apps as a JSON array instead of comma-separated

refactor!: rename load-yaml-matrix to load-vaults-matrix, default directory

refactor!: replace deploy-shared.yml/renovate-shared.yml with composite actions

refactor: rename renovate.yml's find-targets job to load-targets

refactor: rename deploy-targets job to load-targets in deploy.yml/release.yml

refactor: rename encrypt-vaults job to load-vaults in release.yml

refactor: drop --user --break-system-packages from deploy/renovate's pip install

refactor: move Telegram notification out of the renovate action

feat: notify Telegram after a successful deploy

refactor!: drop deploy.yml's target input and load-*-matrix's name filter

refactor: have release.yml call deploy.yml instead of duplicating it

feat: renovate everything nightly on a schedule

feat: minimally validate vault manifests in load-vaults-matrix