chore(deps): update renovate to 38.133.0 and add unicorn (#16)

* chore(deps): update renovate package dependencies

| datasource | package                                                                | from                 | to                   |
| ---------- | ---------------------------------------------------------------------- | -------------------- | -------------------- |
| docker     | ghcr.io/defenseunicorns/packages/uds/valkey                            | 7.2.6-uds.0-upstream | 7.2.7-uds.0-upstream |
| docker     | ghcr.io/renovatebot/renovate                                           | 38.107.0             | 38.130.3             |
| docker     | registry1.dso.mil/ironbank/container-hardening-tools/renovate/renovate | 38.107.0             | 38.130.2             |

* add unicorn

* try securityContext

* bump to 131.2

* push to latest

* revert to ghcr

* docs shim

* fix tasks

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Wayne Starr <me@racer159.com>
Co-authored-by: Wayne Starr <Racer159@users.noreply.github.com>
Release-As: v38.133.0-uds.0

.github/workflows/ci-docs-shim.yaml

@@ -17,7 +17,7 @@ jobs:
     strategy:
       matrix:
         type: [install, upgrade]
-        flavor: [upstream, registry1]
+        flavor: [upstream, registry1, unicorn]
     uses: defenseunicorns/uds-common/.github/workflows/callable-ci-docs-shim.yaml@c52077c870a576d01f169f96d74d1b393c6488ba # v1.1.2
     with:
       flavor: ${{ matrix.flavor }}

.github/workflows/release.yaml

@@ -36,7 +36,7 @@ jobs:
     if: ${{ needs.tag-new-version.outputs.release_created == 'true' }}
     strategy:
       matrix:
-        flavor: [upstream, registry1]
+        flavor: [upstream, registry1, unicorn]
         architecture: [amd64, arm64]
         exclude:
           - flavor: registry1

.github/workflows/test.yaml

@@ -55,7 +55,7 @@ jobs:
       fail-fast: true
       matrix:
         type: [install, upgrade]
-        flavor: [upstream, registry1]
+        flavor: [upstream, registry1, unicorn]
     uses: defenseunicorns/uds-common/.github/workflows/callable-test.yaml@c52077c870a576d01f169f96d74d1b393c6488ba # v1.1.2
     with:
       upgrade-flavors: ${{ needs.check-flavor.outputs.upgrade-flavors }}

tasks.yaml

@@ -76,11 +76,11 @@ tasks:
       - task: actions:determine-arch
       - task: create:package
       - task: setup:k3d-test-cluster
-        if: ${{ or (ne .variables.FLAVOR "upstream") (ne .variables.ARCH "arm64") }}
+        if: ${{ ne .variables.ARCH "arm64" }}
       - task: dependencies:deploy
-        if: ${{ or (ne .variables.FLAVOR "upstream") (ne .variables.ARCH "arm64") }}
+        if: ${{ ne .variables.ARCH "arm64" }}
       - task: create-deploy-test-bundle
-        if: ${{ or (ne .variables.FLAVOR "upstream") (ne .variables.ARCH "arm64") }}
+        if: ${{ ne .variables.ARCH "arm64" }}
       - description: Publish the package
         task: publish:package
         with:

values/registry1-values.yaml

@@ -4,4 +4,4 @@
 image:
   registry: registry1.dso.mil
   repository: ironbank/container-hardening-tools/renovate/renovate
-  tag: 38.107.0
+  tag: 38.133.0

values/unicorn-values.yaml

@@ -0,0 +1,7 @@
+# Copyright 2024 Defense Unicorns
+# SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
+
+image:
+  registry: ghcr.io
+  repository: renovatebot/renovate
+  tag: 38.133.0-full

values/upstream-values.yaml

@@ -4,4 +4,4 @@
 image:
   registry: ghcr.io
   repository: renovatebot/renovate
-  tag: 38.107.0-full
+  tag: 38.133.0-full

zarf.yaml

@@ -29,7 +29,7 @@ components:
         valuesFiles:
           - values/upstream-values.yaml
     images:
-      - ghcr.io/renovatebot/renovate:38.107.0-full
+      - ghcr.io/renovatebot/renovate:38.133.0-full
 
   - name: renovate
     required: true
@@ -43,4 +43,18 @@ components:
         valuesFiles:
           - values/registry1-values.yaml
     images:
-      - registry1.dso.mil/ironbank/container-hardening-tools/renovate/renovate:38.107.0
+      - registry1.dso.mil/ironbank/container-hardening-tools/renovate/renovate:38.133.0
+
+  - name: renovate
+    required: true
+    description: "Deploy Renovate"
+    import:
+      path: common
+    only:
+      flavor: unicorn
+    charts:
+      - name: renovate
+        valuesFiles:
+          - values/unicorn-values.yaml
+    images:
+      - ghcr.io/renovatebot/renovate:38.133.0-full