CI updates

.github/renovate.json5

@@ -113,5 +113,19 @@
       matchFileNames: ['.github/workflows/rebuild.yaml'],
       enabled: false,
     },
+    /** Packages published very recently are not pushed to stabilization branches for security reasons */
+    {
+      matchBaseBranches: [
+        '/^[0-9]+\\.[0-9]+$/',
+        '/^[0-9]+\\.[0-9]+-gdal[0-9]+\\.[0-9]+$/',
+        '/^[0-9]+\\.[0-9]+-ubuntu[0-9]+\\.[0-9]+$/',
+      ],
+      minimumReleaseAge: '7 days',
+    },
+    /** Ungroup Python dependencies */
+    {
+      matchDepNames: ['python'],
+      groupName: 'Python',
+    },
   ],
 }

.github/workflows/clean.yaml

@@ -25,6 +25,9 @@ jobs:
           sudo rm /etc/apt/sources.list.d/*.list
           sudo apt update
           sudo apt install --yes python3-wheel
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
       - run: sudo python3 -m pip install --requirement=ci/requirements.txt
       - name: Clean Docker hub tags
         run: c2cciutils-clean

.github/workflows/main.yaml

@@ -35,7 +35,7 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: '3.11'
-      - run: python3 -m pip install --user --requirement=ci/requirements.txt
+      - run: python3 -m pip install --requirement=ci/requirements.txt
       - name: Print environment information
         run: c2cciutils-env
 

.pre-commit-config.yaml

@@ -90,11 +90,7 @@ repos:
     hooks:
       - id: jsonschema-validator
         files: ^ci/config\.yaml$
-ci:
-  autoupdate_schedule: quarterly
-  skip:
-    - copyright
-    - poetry-check
-    - poetry-lock
-    - ripsecrets
-    - jsonschema-validator
+  - repo: https://github.com/renovatebot/pre-commit-hooks
+    rev: 37.428.1
+    hooks:
+      - id: renovate-config-validator