Merge pull request 'Configure Renovate' (#1) from renovate/configure into main

Reviewed-on: https://git.front.kjuulh.io/kjuulh/drone-semantic-release/pulls/1

.drone.yml

@@ -0,0 +1,63 @@
+kind: pipeline
+name: default
+type: docker
+
+steps:
+  - name: load_secret
+    image: debian:buster-slim
+    volumes:
+      - name: ssh
+        path: /root/.ssh/
+    environment:
+      SSH_KEY:
+        from_secret: gitea_id_ed25519
+    commands:
+      - mkdir -p $HOME/.ssh/
+      - echo "$SSH_KEY" | base64 -d > $HOME/.ssh/id_ed25519
+
+  - name: build
+    image: kasperhermansen/cuddle:latest
+    pull: always
+    volumes:
+      - name: ssh
+        path: /root/.ssh/
+      - name: dockersock
+        path: /var/run
+    commands:
+      - apk add bash git
+      - cuddle_cli x build_docker
+    environment:
+      DOCKER_BUILDKIT: 1
+      DOCKER_USERNAME:
+        from_secret: docker_username
+      DOCKER_PASSWORD:
+        from_secret: docker_password
+      SSH_KEY:
+        from_secret: gitea_id_ed25519
+    depends_on:
+      - "load_secret"
+  - name: send telegram notification
+    image: appleboy/drone-telegram
+    settings:
+      token:
+        from_secret: telegram_token
+      to: 2129601481
+      format: markdown
+    depends_on:
+      - build
+    when:
+      status: [failure, success]
+
+services:
+- name: docker
+  image: docker:dind
+  privileged: true
+  volumes:
+  - name: dockersock
+    path: /var/run
+volumes:
+  - name: ssh
+    temp: {}
+  - name: dockersock
+    temp: {}
+

.releaserc.yml

@@ -1,3 +1,8 @@
 branches: 
   - "main"
-  - "next"
+
+plugins:
+  - "@semantic-release/commit-analyzer"
+  - "@semantic-release/release-notes-generator"
+  - "@semantic-release/changelog"
+  - "@semantic-release/git"

cuddle.yaml

@@ -2,6 +2,10 @@
 
 base: false
 
+vars:
+  service: "drone-semantic-release"
+  registry: "kasperhermansen"
+
 scripts:
   build_docker:
     type: shell

renovate.json

@@ -0,0 +1,3 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+}

scripts/build_docker.sh

@@ -2,6 +2,17 @@
 
 set -e
 
+echo "building docker image"
+
 export DOCKER_BUILDKIT=1
 
-docker build --ssh default -f $TMP/build_docker.Dockerfile .
+tag="$REGISTRY/$SERVICE:${COMMIT_SHA:0:10}"
+latest_tag="$REGISTRY/$SERVICE:latest"
+
+docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD
+
+docker build -t "$tag" --cache-from "$latest_tag" -f $TMP/build_docker.Dockerfile .
+docker tag "$tag" "$latest_tag" 
+docker push "$tag" &
+docker push "$latest_tag" &
+wait

templates/build_docker.Dockerfile

@@ -5,9 +5,15 @@ RUN apk add --no-cache openssh-client git
 
 RUN yarn global add semantic-release@18
 
+RUN yarn global add @semantic-release/git @semantic-release/changelog
+
 # Download public key for github.com
-RUN mkdir -p -m 0700 ~/.ssh && ssh-keyscan github.com >> ~/.ssh/known_hosts
+RUN \
+  mkdir -p -m 0700 ~/.ssh \
+  && ssh-keyscan github.com >> ~/.ssh/known_hosts \
+  && ssh-keyscan git.front.kjuulh.io >> ~/.ssh/known_hosts
 
-COPY . .
+WORKDIR /src/app/
 
-RUN --mount=type=ssh,id=default semantic-release
+#RUN --mount=type=ssh,id=default semantic-release --no-ci
+# run as cmd during pipeline, such easier