Setup Renovate

[brehldev]

Are you interested in a PR to setup renovate? Specifically for fixing base image vulnerabilities as they pop up. I would be happy to support this and create it.

[gquintard]

Hi! Thank you for the offer!
I'll happily check out what it looks like, but does it make sense in our case as we just use the package manager to download the latest version of the packages?

[brehldev]

Totally makes sense! The only thing I’d add is that reproducible Docker builds bring a lot of peace of mind. Without pinning versions, it’s hard to know exactly what ends up in the image from one build to the next or if a CVE is fixed. Plus its nice to have it all handled through automated PRs. I think githubs own Dependabot might be a valid option as well

[gquintard]

I'll dutifully review anything you reckon makes change :-)