ci: fix Renovate config blocking 8.9 image updates and address config debt

.github/renovate.json5

@@ -137,7 +137,7 @@
     {
       description: 'Disable major updates for Helm dependencies to prevent breaking changes.',
       enabled: false,
-      matchManagers: ['helmv3', 'helm-values', 'custom.regex'],
+      matchManagers: ['helm', 'helm-values', 'custom.regex'],
       matchUpdateTypes: ['major'],
     },
     // Internal scripts do not need to be updated as they are not versioned outside of git
@@ -269,6 +269,36 @@
       ],
       allowedVersions: '~8.17.0',
     },
+    // Limit Elasticsearch version to latest supported version in Camunda 8.8 chart.
+    // https://docs.camunda.io/docs/reference/supported-environments/#camunda-8-self-managed
+    {
+      matchDatasources: [
+        'docker',
+      ],
+      matchFileNames: [
+        'charts/camunda-platform-8.8/values.yaml',
+        'charts/camunda-platform-8.8/values-latest.yaml',
+      ],
+      matchPackageNames: [
+        '/.*elasticsearch.*/',
+      ],
+      allowedVersions: '~8.18.0',
+    },
+    // Limit Elasticsearch version to latest supported version in Camunda 8.9 chart.
+    // https://docs.camunda.io/docs/reference/supported-environments/#camunda-8-self-managed
+    {
+      matchDatasources: [
+        'docker',
+      ],
+      matchFileNames: [
+        'charts/camunda-platform-8.9/values.yaml',
+        'charts/camunda-platform-8.9/values-latest.yaml',
+      ],
+      matchPackageNames: [
+        '/.*elasticsearch.*/',
+      ],
+      allowedVersions: '~8.18.0',
+    },
     // Limit alpha chart version to alpha tags only.
     {
       enabled: true,
@@ -280,7 +310,6 @@
       ],
       matchFileNames: [
         // bump these to whatever the latest alpha is
-        'charts/camunda-platform-8.9/Chart.yaml',
         'charts/camunda-platform-8.10/Chart.yaml',
       ],
       versioning: 'regex:^(?<major>\\d+)(.(?<minor>\\d+))(.(?<patch>\\d+))(-(?<prerelease>alpha[1-9]))$',
@@ -292,7 +321,7 @@
         '/.*camunda.*/',
       ],
       matchDatasources: [
-        'helmv3',
+        'helm',
         'helm-values',
         'docker',
         'regex',
@@ -322,6 +351,10 @@
         'charts/camunda-platform-8.8/values.yaml',
         'charts/camunda-platform-8.8/values-latest.yaml',
         'charts/camunda-platform-8.8/values-enterprise.yaml',
+        'charts/camunda-platform-8.9/Chart.yaml',
+        'charts/camunda-platform-8.9/values.yaml',
+        'charts/camunda-platform-8.9/values-latest.yaml',
+        'charts/camunda-platform-8.9/values-enterprise.yaml',
       ],
       matchUpdateTypes: ['patch', 'pin'],
       schedule: ['at any time'],
@@ -335,16 +368,12 @@
         '/.*camunda.*/',
       ],
       matchDatasources: [
-        'helmv3',
+        'helm',
         'helm-values',
         'docker',
         'regex',
       ],
       matchFileNames: [
-        'charts/camunda-platform-8.9/Chart.yaml',
-        'charts/camunda-platform-8.9/values.yaml',
-        'charts/camunda-platform-8.9/values-latest.yaml',
-        'charts/camunda-platform-8.9/values-enterprise.yaml',
         'charts/camunda-platform-8.10/Chart.yaml',
         'charts/camunda-platform-8.10/values.yaml',
         'charts/camunda-platform-8.10/values-latest.yaml',
@@ -356,14 +385,11 @@
       prCreation: 'immediate',
     },
     {
-      description: 'Parse Camunda 8.9 and 8.10 image tags as semver so alpha updates work',
+      description: 'Parse Camunda 8.10 image tags as semver so alpha updates work',
       enabled: true,
       matchPackageNames: ['/.*camunda.*/'],
-      matchDatasources: ['helmv3', 'helm-values', 'docker', 'regex'],
+      matchDatasources: ['helm', 'helm-values', 'docker', 'regex'],
       matchFileNames: [
-        'charts/camunda-platform-8.9/Chart.yaml',
-        'charts/camunda-platform-8.9/values.yaml',
-        'charts/camunda-platform-8.9/values-latest.yaml',
         'charts/camunda-platform-8.10/Chart.yaml',
         'charts/camunda-platform-8.10/values.yaml',
         'charts/camunda-platform-8.10/values-latest.yaml',

.github/workflows/renovate-config-check.yaml

@@ -3,22 +3,36 @@ name: Renovate - Config Check
 on:
   push:
     paths:
-    - '.github/renovate.json5'
+      - '.github/renovate.json5'
+      - 'charts/camunda-platform-*/Chart.yaml'
+      - 'scripts/renovate-config-check/**'
   pull_request:
     paths:
-    - '.github/renovate.json5'
-  workflow_dispatch: { }
+      - '.github/renovate.json5'
+      - 'charts/camunda-platform-*/Chart.yaml'
+      - 'scripts/renovate-config-check/**'
+  workflow_dispatch: {}
 
 permissions:
   contents: read
 
 jobs:
   check:
-    name: Check renovate config 
+    name: Check renovate config
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-    - name: Validate renovate config
-      uses: docker://renovate/renovate
-      with:
-        args: renovate-config-validator
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      - name: Validate renovate config syntax
+        uses: docker://renovate/renovate
+        with:
+          args: renovate-config-validator
+
+      - name: Set up Go
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+        with:
+          go-version-file: scripts/renovate-config-check/go.mod
+
+      - name: Validate alpha versioning consistency
+        working-directory: scripts/renovate-config-check
+        run: go test ./... -v

scripts/renovate-config-check/go.mod

@@ -0,0 +1,14 @@
+module scripts/renovate-config-check
+
+go 1.26
+
+require (
+	github.com/stretchr/testify v1.11.1
+	github.com/titanous/json5 v1.0.0
+	gopkg.in/yaml.v3 v3.0.1
+)
+
+require (
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/pmezard/go-difflib v1.0.0 // indirect
+)

scripts/renovate-config-check/go.sum

@@ -0,0 +1,20 @@
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
+github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/robertkrimen/otto v0.2.1 h1:FVP0PJ0AHIjC+N4pKCG9yCDz6LHNPCwi/GKID5pGGF0=
+github.com/robertkrimen/otto v0.2.1/go.mod h1:UPwtJ1Xu7JrLcZjNWN8orJaM5n5YEtqL//farB5FlRY=
+github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
+github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
+github.com/titanous/json5 v1.0.0 h1:hJf8Su1d9NuI/ffpxgxQfxh/UiBFZX7bMPid0rIL/7s=
+github.com/titanous/json5 v1.0.0/go.mod h1:7JH1M8/LHKc6cyP5o5g3CSaRj+mBrIimTxzpvmckH8c=
+golang.org/x/text v0.4.0 h1:BrVqGRd7+k1DiOgtnFvAkoQEWQvBc25ouMJM6429SFg=
+golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/sourcemap.v1 v1.0.5 h1:inv58fC9f9J3TK2Y2R1NPntXEn3/wjWHkonhIUODNTI=
+gopkg.in/sourcemap.v1 v1.0.5/go.mod h1:2RlvNNSMglmRrcvhfuzp4hQHwOtjxlbjX7UPY/GXb78=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=