From d225616897f867585dd1b91524aa6f238ef99e31 Mon Sep 17 00:00:00 2001
From: Sam <109683132+kernelsam@users.noreply.github.com>
Date: Wed, 24 Sep 2025 13:09:44 -0700
Subject: [PATCH] #37 use renovate for docker updates

---
 .github/dependabot.yml            |  4 --
 .github/renovate.json             |  9 +++++
 .vscode/cspell.json               | 66 +++++++++++++++----------------
 Dockerfile                        |  2 +-
 dependabot-approve-and-merge.yaml | 15 -------
 5 files changed, 43 insertions(+), 53 deletions(-)
 create mode 100644 .github/renovate.json
 delete mode 100644 dependabot-approve-and-merge.yaml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 78367af..5760d5b 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -7,10 +7,6 @@ updates:
     directory: "/"
     schedule:
       interval: "daily"
-  - package-ecosystem: "docker"
-    directory: "/"
-    schedule:
-      interval: "daily"
   - package-ecosystem: "pip"
     directory: "/"
     schedule:
diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 0000000..ed72ea3
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,9 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "enabledManagers": ["dockerfile", "docker-compose"],
+  "extends": [
+    "config:recommended",
+    ":disableDependencyDashboard",
+    "docker:pinDigests"
+  ]
+}
diff --git a/.vscode/cspell.json b/.vscode/cspell.json
index 4a0a104..5ad368f 100644
--- a/.vscode/cspell.json
+++ b/.vscode/cspell.json
@@ -5,54 +5,54 @@
   "language": "en",
   // words - list of words to be always considered correct
   "words": [
+    "Addx",
+    "alnum",
+    "analysing",
+    "AUNA",
     "CCLA",
+    "cfgp",
     "CODEOWNER",
+    "configparser",
     "CONFIGPATH",
+    "Dlalas",
+    "fstring",
+    "HAUPTMAN",
     "ICLA",
+    "ipython",
     "loadx",
+    "Makio",
+    "MDMPER",
     "myhost",
     "mysenzproj",
-    "RESOURCEPATH",
-    "Senzing",
-    "SUPPORTPATH",
-    "schemaname",
-    "configparser",
-    "cfgp",
     "optionxform",
-    "shuf",
-    "terashuf",
-    "unresolve",
-    "Rotorville",
+    "pydevproject",
+    "pylint",
+    "PYTHONPATH",
+    "PYTHONUNBUFFERED",
     "redoer",
+    "RESOURCEPATH",
     "Retryable",
-    "pylint",
-    "stackoverflow",
-    "pydevproject",
-    "analysing",
+    "rootfs",
+    "Rotchester",
+    "Rotorville",
+    "schemaname",
+    "Senzing",
+    "senzingapi",
     "shellcheck",
-    "fstring",
+    "shuf",
     "simplifiable",
-    "senzingapi",
-    "ipython",
-    "virtualenv",
-    "venv",
-    "rootfs",
-    "PYTHONPATH",
-    "PYTHONUNBUFFERED",
+    "srccode",
+    "stackoverflow",
+    "SUPPORTPATH",
+    "terashuf",
     "toplevel",
-    "alnum",
-    "watchlist",
-    "Addx",
     "Truthset",
-    "srccode",
-    "Dlalas",
-    "MDMPER",
-    "Rotchester",
-    "Makio",
-    "Yamanaka",
-    "AUNA",
+    "unresolve",
+    "venv",
+    "virtualenv",
+    "watchlist",
     "Xlas",
-    "HAUPTMAN"
+    "Yamanaka"
   ],
   "ignorePaths": [
     ".git/**",
diff --git a/Dockerfile b/Dockerfile
index d64a8ae..b9689b2 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-ARG BASE_IMAGE=senzing/senzingapi-runtime 
+ARG BASE_IMAGE=senzing/senzingapi-runtime:3.12.8
 FROM ${BASE_IMAGE}
 
 ENV REFRESHED_AT=2022-12-21
diff --git a/dependabot-approve-and-merge.yaml b/dependabot-approve-and-merge.yaml
deleted file mode 100644
index 326edea..0000000
--- a/dependabot-approve-and-merge.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-name: Dependabot approve and merge
-
-on:
-  pull_request:
-    branches: [main]
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  dependabot-approve-and-merge:
-    secrets:
-      SENZING_GITHUB_CODEOWNER_PR_RW_TOKEN: ${{ secrets.SENZING_GITHUB_CODEOWNER_PR_RW_TOKEN }}
-    uses: senzing-factory/build-resources/.github/workflows/dependabot-approve-and-merge.yaml@v2