versions-renovate

Managing platform versions and Renovate annotations in the homelab. Use when: (1) Adding a new version entry to versions.env, (2) Configuring Renovate to track a new dependency, (3) Debugging why Renovate ignores or mis-detects a version, (4) Understanding annotation syntax for versions.env, (5) Adding container image tracking to YAML files, (6) Configuring package rules or grouping in Renovate. Triggers: "versions.env", "renovate annotation", "renovate not updating", "add version", "renovate ignore", "datasource", "extractVersion", "package rule", "automerge", "renovate validate", "dependency tracking", "version management"

Jump to install

Repository: ionfury/homelab
Last source activity: July 26, 2026 at 00:53
Detected SKILL.md language: English
Stars: 24
Forks: 3

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

A direct command skips the review prompt. Inspect the source before running it.

npx skills add https://github.com/ionfury/homelab --skill versions-renovate

The command stays on one line. Scroll horizontally to inspect it before copying.

Prefer a local copy? Download the files currently available to SkillsMP.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

File Explorer

2 files

SKILL.md

Source instructions · Read-only preview

Back to search Back to installation

gha-pipelines

Create and modify GitHub Actions CI/CD workflows for the homelab repository. Covers validation pipelines, OCI artifact promotion, and infrastructure testing. Use when: (1) Creating new GitHub Actions workflows, (2) Modifying existing CI/CD pipelines, (3) Adding validation or testing stages, (4) Debugging workflow failures. Triggers: "github actions", "workflow", "ci/cd", "pipeline", "gha", "build artifact", "validation workflow", "ci pipeline"

2026-07-26

promotion-pipeline

Direct build-to-live OCI artifact pipeline from PR merge to cluster deployment. Use when: (1) Tracing why a change has not reached a cluster, (2) Understanding the build/deploy lifecycle, (3) Performing rollback or emergency re-tagging, (4) Investigating GitHub Actions workflow failures, (5) Checking OCI artifact tags in GHCR, (6) Interpreting canary-checker post-deploy validation. Triggers: "promotion", "pipeline", "artifact", "oci", "live deploy", "not deploying", "ghcr", "build artifact", "tag validated", "canary-checker", "rollback", "semver", "github release", "promotion pipeline", "why isn't live updating"

2026-07-26

security-testing

Adversarial security testing methodology for the Kubernetes homelab. Covers network policy evasion, authentication bypass, privilege escalation, credential theft, and supply chain attacks. Use when: (1) Red team testing against the homelab, (2) Validating network policy enforcement, (3) Testing WAF bypass on external gateway, (4) Probing authentication layers, (5) Assessing container escape paths, (6) Auditing RBAC and service accounts, (7) Testing supply chain security of OCI promotion pipeline. Triggers: "security test", "red team", "pentest", "penetration test", "attack surface", "WAF bypass", "network policy evasion", "privilege escalation", "lateral movement", "credential theft", "container escape", "RBAC audit", "security audit", "vulnerability"

2026-07-26

View all from this repository

name	versions-renovate
description	Managing platform versions and Renovate annotations in the homelab. Use when: (1) Adding a new version entry to versions.env, (2) Configuring Renovate to track a new dependency, (3) Debugging why Renovate ignores or mis-detects a version, (4) Understanding annotation syntax for versions.env, (5) Adding container image tracking to YAML files, (6) Configuring package rules or grouping in Renovate. Triggers: "versions.env", "renovate annotation", "renovate not updating", "add version", "renovate ignore", "datasource", "extractVersion", "package rule", "automerge", "renovate validate", "dependency tracking", "version management"
user-invocable	false

Versions and Renovate Management

Versions live in kubernetes/platform/versions.env. Renovate's custom regex manager in .github/renovate.json5 parses # renovate: annotations on the line above each entry. Flux substitutes ${var} references into HelmRelease specs at reconcile time.

Choosing the Initial Version

Always verify the latest stable tag from the source — never guess from memory. Training data lags reality by months to years, so a remembered tag is almost always stale. Before writing any *_version= entry or hardcoded image tag, look it up:

# Docker/OCI registry (GHCR shown; anonymous pull token)
TOKEN=$(curl -s "https://ghcr.io/token?scope=repository:<org>/<image>:pull&service=ghcr.io" | jq -r .token)
curl -s -H "Authorization: Bearer $TOKEN" "https://ghcr.io/v2/<org>/<image>/tags/list" | jq -r  |  -V | 

skopeo list-tags docker://ghcr.io/<org>/<image>          
git ls-remote --tags --refs https://github.com/<org>/<repo>.git |  -V |

Field	Required	Purpose
`datasource`	Yes	Where Renovate looks (`helm`, `docker`, `github-releases`, `github-tags`)
`depName`	Yes	Human-readable name shown in Renovate PRs
`packageName`	No	Registry-specific lookup path (OCI registries, GitHub repos)
`extractVersion`	No	Regex to transform upstream version (e.g., strip `v` prefix)
`registryUrl`	No	HTTP Helm repository URL (not for OCI)
`versioning`	No	Version scheme override for non-semver (e.g., `loose`)

Symptom	Cause	Fix
Silently ignored	Wrong key order	Follow exact order above
Can't find package	`oci://` prefix in packageName	Remove `oci://` prefix
Version has unwanted `v`	Missing `extractVersion`	Add `extractVersion=^v(?<version>.*)$`
Can't find OCI chart	`datasource=helm` for OCI	Use `datasource=docker`
Skips non-semver	Missing `versioning=loose`	Add `versioning=loose`
Regex doesn't match	Annotation not on line above	Must be immediately above `key=value`

versions-renovate

Install options

Review the source files

Versions and Renovate Management

Choosing the Initial Version

Versions and Renovate Management

Choosing the Initial Version

Annotation Syntax

Datasource Selection

Examples

YAML Container Image Annotations

Package Rules

Debugging

versions-renovate

Source facts

Install options

Review the source files

More from this repository

More from this repository

Versions and Renovate Management

Choosing the Initial Version

Versions and Renovate Management

Choosing the Initial Version

Annotation Syntax

Datasource Selection

Examples

YAML Container Image Annotations

Package Rules

Debugging