ci: Update workflows

.commitlintrc.json

@@ -0,0 +1,46 @@
+{
+  "rules": {
+    "type-enum": [
+      2,
+      "always",
+      [
+        "chore",
+        "ci",
+        "deps",
+        "feat",
+        "fix",
+        "patch",
+        "style"
+      ]
+    ],
+    "subject-empty": [
+      2,
+      "never"
+    ],
+    "type-case": [
+      2,
+      "always",
+      "lower-case"
+    ],
+    "subject-case": [
+      0
+    ],
+    "type-empty": [
+      2,
+      "never"
+    ],
+    "scope-case": [
+      2,
+      "always",
+      "lower-case"
+    ],
+    "scope-enum": [
+      0
+    ],
+    "header-max-length": [
+      2,
+      "always",
+      120
+    ]
+  }
+}

.github/workflows/docker-release.yaml

@@ -43,12 +43,12 @@ jobs:
         id: matrix
         run: |
           matrix=$(cat matrix.json)
-          echo "matrix=${matrix}" | tee $GITHUB_OUTPUT
+          echo "matrix=${matrix}" | tee "$GITHUB_OUTPUT"
 
   build:
     name: ${{ matrix.job_name }}
     needs: generate-matrix
-    uses: mirceanton/reusable-workflows/.github/workflows/docker-release.yaml@17d8ef4df857d93b905170956fbbcd56b296e8bb
+    uses: mirceanton/reusable-workflows/.github/workflows/reusable-docker-build-push.yaml@f4dce998a168bbe2e53664acf4dd29407cd3d29f # v3.4.19
     if: ${{ fromJson(needs.generate-matrix.outputs.matrix)['include'].length > 0 }}
     strategy:
       matrix: ${{ fromJson(needs.generate-matrix.outputs.matrix) }}

.github/workflows/label-sync.yaml

@@ -0,0 +1,38 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: Label Sync
+
+on:
+  # Manual Trigger
+  workflow_dispatch:
+    inputs:
+      dry-run:
+        description: Dry Run
+        default: true
+        required: false
+        type: boolean
+
+  # Dry Run on any PR that changes the labels config or the workflow
+  pull_request:
+    paths:
+      - .github/workflows/label-sync.yaml
+      - .github/labels.yaml
+
+  # "Wet" Run on any push to the main branch that changes the labels config or the workflow
+  push:
+    branches: ["main", "master"]
+    paths:
+      - .github/workflows/label-sync.yaml
+      - .github/labels.yaml
+
+  # "Wet" Run hourly
+  schedule:
+    - cron: "0 * * * *"
+
+jobs:
+  label-sync:
+    uses: mirceanton/reusable-workflows/.github/workflows/reusable-label-sync.yaml@f4dce998a168bbe2e53664acf4dd29407cd3d29f # v3.4.19
+    secrets: inherit
+    with:
+      dry-run: ${{ inputs.dry-run || github.event_name == 'pull_request' }}
+      config-file: .github/labels.yaml

.github/workflows/labeler.yaml

@@ -0,0 +1,13 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: Labeler
+
+on:
+  pull_request_target: {}
+
+jobs:
+  pr-labeler:
+    uses: mirceanton/reusable-workflows/.github/workflows/reusable-labeler.yaml@f4dce998a168bbe2e53664acf4dd29407cd3d29f # v3.4.19
+    secrets: inherit
+    with:
+      config-file: .github/labeler.yaml

.github/workflows/lint.yaml

@@ -0,0 +1,19 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: Lint
+
+on:
+  # Manual Trigger
+  workflow_dispatch: {}
+
+  # Run on any PR
+  pull_request: {}
+
+jobs:
+  actionlint:
+    uses: mirceanton/reusable-workflows/.github/workflows/reusable-actionlint.yaml@f4dce998a168bbe2e53664acf4dd29407cd3d29f # v3.4.19
+    secrets: inherit
+
+  commitlint:
+    uses: mirceanton/reusable-workflows/.github/workflows/reusable-commitlint.yaml@f4dce998a168bbe2e53664acf4dd29407cd3d29f # v3.4.19
+    secrets: inherit

.github/workflows/renovate.yaml

@@ -3,34 +3,39 @@
 name: Renovate
 
 on:
+  # Manual Trigger
   workflow_dispatch:
     inputs:
       dry-run:
         description: Dry Run
-        default: "false"
+        default: false
         required: false
+        type: boolean
       log-level:
         description: Log Level
         default: debug
         required: false
+        type: string
 
+  # Dry Run on any PR that changes the renovate config or the renovate workflow
   pull_request:
     paths:
-      - ".github/workflows/renovate.yaml"
-      - ".github/configs/renovate/*.json5"
-      - "renovate.json5"
+      - .github/workflows/renovate.yaml
+      - renovate.json5
 
+  # "Wet" Run hourly
   schedule:
-    - cron: "0 * * * *" # hourly
+    - cron: "0 * * * *"
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.number || github.ref }}
   cancel-in-progress: true
 
 jobs:
   renovate:
-    uses: mirceanton/reusable-workflows/.github/workflows/renovate.yaml@17d8ef4df857d93b905170956fbbcd56b296e8bb
+    uses: mirceanton/reusable-workflows/.github/workflows/reusable-renovate.yaml@f4dce998a168bbe2e53664acf4dd29407cd3d29f # v3.4.19
     secrets: inherit
     with:
       dry-run: "${{ inputs.dry-run == true || github.event_name == 'pull_request' }}"
       log-level: "${{ inputs.log-level || 'debug' }}"
+      config-file: "renovate.json5"

renovate.json5

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "dependencyDashboardTitle": "Renovate Dashboard 🤖",
+  "extends": [
+    ":dependencyDashboard",
+    "config:best-practices",
+    ":disableRateLimiting",
+    ":semanticCommits",
+    "github>mirceanton/renovate-config//labels/all.json5",
+    "github>mirceanton/renovate-config//semantic-commits/all.json5",
+    "github>mirceanton/renovate-config//auto-merge/github-actions.json5"
+  ]
+}