renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["github>chodeus/chodeus-ops"],
  "customManagers": [
    {
      "customType": "regex",
      "description": "Track the pinned FFMPEG_VERSION ARG against chodeus/ffmpeg-static releases (tags like n8.1.1).",
      "fileMatch": ["(^|/)Dockerfile$"],
      "matchStrings": [
        "#\\s*renovate:\\s*datasource=github-releases depName=(?<depName>\\S+)\\s+ARG FFMPEG_VERSION=(?<currentValue>\\S+)"
      ],
      "datasourceTemplate": "github-releases",
      "versioningTemplate": "regex:^n?(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$"
    }
  ],
  "packageRules": [
    {
      "description": "Require manual review for chodeus-ops digest updates. The central preset auto-merges digests, but Renovate's cache can lag behind pushes we make manually during incident response — auto-merge has already silently downgraded a chodeus-ops pin to a broken SHA (chodeus/BeatsCheck#26). Opt-out here until the race is resolved upstream.",
      "matchDepNames": ["chodeus/chodeus-ops"],
      "matchUpdateTypes": ["digest"],
      "automerge": false
    }
  ]
}