fix: renovate bot infra

.github/workflows/dependencies.yaml

@@ -14,7 +14,7 @@ jobs:
         id: app-token
         uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
-          app-id: ${{ secrets.PROJECT_APP_ID }}
+          client-id: ${{ secrets.PROJECT_APP_ID }}
           private-key: ${{ secrets.PROJECT_APP_KEY }}
 
       - name: Checkout

Taskfile.yml

@@ -6,19 +6,33 @@ version: "3"
 vars:
   DIR_CHART_VERSION: '{{ .DIR_CHART_VERSION | default "0.0.0-latest" }}'
   DIRCTL_IMAGE_TAG: '{{ .DIRCTL_IMAGE_TAG | default "latest" }}'
-  RENOVATE_VERSION: "43.89.5"
+
+  # renovate: datasource=github-releases depName=renovatebot/renovate versioning=semver
+  RENOVATE_VERSION: "43.209.4"
+
   BIN_DIR: "{{ .ROOT_DIR }}/.bin"
+
+  # renovate: datasource=github-tags depName=helm/helm versioning=semver
   HELM_VERSION: "4.1.3"
   HELM_BIN: "{{ .BIN_DIR }}/helm-{{.HELM_VERSION}}"
+
+  # renovate: datasource=github-releases depName=kubernetes/kubernetes versioning=semver
   KUBECTL_VERSION: "1.35.3"
   KUBECTL_BIN: "{{ .BIN_DIR }}/kubectl-{{.KUBECTL_VERSION}}"
+
+  # renovate: datasource=go depName=sigs.k8s.io/kind versioning=semver
   KIND_VERSION: "0.31.0"
   KIND_BIN: "{{ .BIN_DIR }}/kind-{{.KIND_VERSION}}"
+
+  # renovate: datasource=github-releases depName=astral-sh/uv versioning=semver
   UV_VERSION: "0.10.11"
   UV_BIN: "{{ .BIN_DIR }}/uv-{{.UV_VERSION}}"
   UV_PUBLISH_TOKEN: '{{ .UV_PUBLISH_TOKEN | default "" }}'
+
+  # renovate: datasource=github-releases depName=sigstore/cosign versioning=semver
   COSIGN_VERSION: "3.0.5"
   COSIGN_BIN: "{{ .BIN_DIR }}/cosign-{{.COSIGN_VERSION}}"
+
   KIND_CLUSTER_NAME: "sdk-py-test"
 
 tasks:
@@ -373,7 +387,7 @@ tasks:
     internal: true
     cmd: npm install -g renovate@{{ .RENOVATE_VERSION }}
     status:
-      - npm list -g renovate
+      - npm list -g renovate | grep {{ .RENOVATE_VERSION }} -q
 
   deps:renovate:sync:
     desc: Sync dependencies with Renovate

examples/pyproject.toml

@@ -8,6 +8,7 @@ dependencies = [
 ]
 
 [[tool.uv.index]]
+name = "buf"
 url = "https://buf.build/gen/python"
 
 [tool.uv.sources]

pyproject.toml

@@ -19,8 +19,13 @@ dependencies = [
 dev = ["pytest>=9.0.0", "uuid>=1.30"]
 
 [[tool.uv.index]]
+name = "buf"
 url = "https://buf.build/gen/python"
 
+[tool.uv.sources]
+agntcy-dir-grpc-python = { index = "buf" }
+agntcy-dir-protocolbuffers-python = { index = "buf" }
+
 [build-system]
 requires = ["hatchling"]
 build-backend = "hatchling.build"

renovate.json

@@ -49,6 +49,18 @@
     "enabled": true
   },
   "packageRules": [
+    {
+      "description": [
+        "Buf Schema Registry Python SDKs are not on PyPI; use Buf index and skip release-age gate (Buf simple API has no timestamps)."
+      ],
+      "matchDatasources": ["pypi"],
+      "matchPackageNames": [
+        "agntcy-dir-grpc-python",
+        "agntcy-dir-protocolbuffers-python"
+      ],
+      "registryUrls": ["https://buf.build/gen/python"],
+      "minimumReleaseAge": null
+    },
     {
       "matchUpdateTypes": ["major"],
       "enabled": false,