Hardcode helm and yq version and run make in all folders

.github/workflows/pre-commit.yaml

@@ -11,6 +11,8 @@ jobs:
     - uses: actions/setup-python@v7
     - uses: alexellis/arkade-get@master
       with:
-        kubeconform: latest
+        # renovate: datasource=github-tags depName=yannh/kubeconform versioning=semver
+        kubeconform: v0.8.0
+        # renovate: datasource=github-tags depName=kyverno/kyverno versioning=semver
         kyverno: v1.17.1
     - uses: pre-commit/action@v3.0.1

.github/workflows/update-crds-and-manifests.yaml

@@ -31,6 +31,14 @@ jobs:
           touch ${file}
         done
 
+    - name: Install helm and yq
+      uses: alexellis/arkade-get@master
+      with:
+        # renovate: datasource=github-tags depName=helm/helm versioning=semver
+        helm: v4.3.0
+        # renovate: datasource=github-tags depName=mikefarah/yq versioning=semver
+        yq: v4.53.3
+
     - name: Update CRDs and render helm templates
       run: make
 

.pre-commit-config.yaml

@@ -38,4 +38,9 @@ repos:
           - test
           - apps/kyverno/policies/
         pass_filenames: false
-        always_run: true
+        always_run: true
+  - repo: https://github.com/renovatebot/pre-commit-hooks
+    rev: 42.95.1
+    hooks:
+      - id: renovate-config-validator
+        args: [--strict]

apps/1password-connect/crds.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:

apps/external-dns/crds.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:

renovate.json

@@ -33,5 +33,14 @@
         "release:major"
       ]
     }
+  ],
+  "customManagers": [
+    {
+      "customType": "regex",
+      "managerFilePatterns": ["^\\.github/workflows/.*\\.ya?ml$"],
+      "matchStrings": [
+        "# renovate: datasource=(?<datasource>[^\\s]+) depName=(?<depName>[^\\s]+)(?: versioning=(?<versioning>[^\\s]+))?\\s+[^\\s#]+:\\s*(?<currentValue>v?[^\\s\\n]+)"
+      ]
+    }
   ]
 }