From 37761552f84c5212f24bafc8dabe30be21a0f98f Mon Sep 17 00:00:00 2001
From: Mariyan Dimitrov <mariyan.dimitrov@canonical.com>
Date: Wed, 18 Oct 2023 23:56:30 +0300
Subject: [PATCH] ci(digest): Add digest pinning

---
 renovate.json | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/renovate.json b/renovate.json
index 39a2b6e..25eced5 100644
--- a/renovate.json
+++ b/renovate.json
@@ -2,5 +2,30 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:base"
+  ],
+  "regexManagers": [
+    {
+      "fileMatch": ["(^|/)rockcraft.yaml$"],
+      "description": "Update base image references",
+      "matchStringsStrategy": "any",
+      "matchStrings": ["# renovate: build-base:\\s+(?<depName>[^:]*):(?<currentValue>[^\\s@]*)(@(?<currentDigest>sha256:[0-9a-f]*))?",
+      "# renovate: base:\\s+(?<depName>[^:]*):(?<currentValue>[^\\s@]*)(@(?<currentDigest>sha256:[0-9a-f]*))?"],
+      "datasourceTemplate": "docker",
+      "versioningTemplate": "ubuntu"
+    }
+  ],
+  "packageRules": [
+    {
+      "enabled": true,
+      "matchDatasources": [
+        "docker"
+      ],
+      "pinDigests": true
+    },
+    {
+      "matchFiles": ["rockcraft.yaml"],
+      "matchUpdateTypes": ["major", "minor", "patch"],
+      "enabled": false
+    }
   ]
 }