feat: enhance renovate configuration with new package rules for Docker, Devcontainer, and GitHub Actions

Author: Zalfsten

renovate.json

@@ -9,6 +9,7 @@
 
   "enabledManagers": [
     "dockerfile",
+    "devcontainer",
     "regex",
     "pep621",
     "github-actions"
@@ -33,45 +34,61 @@
 
   "packageRules": [
     {
-      "matchManagers": ["github-actions"],
-      "matchUpdateTypes": ["patch", "minor"],
-      "groupName": "GitHub Actions"
-    },
-    {
-      "matchManagers": ["github-actions"],
-      "matchUpdateTypes": ["major"],
-      "groupName": "GitHub Actions (major)"
+      "description": "🔷 Runtime Sync: Docker + Devcontainer base images",
+      "matchManagers": ["dockerfile", "devcontainer"],
+      "matchPackagePatterns": [
+        "python",
+        "alpine",
+        "mcr.microsoft.com/devcontainers"
+      ],
+      "groupName": "Runtime base (Docker + Devcontainer)"
     },
 
     {
-      "matchManagers": ["dockerfile"],
-      "groupName": "Docker base images"
-    },
-    {
-      "matchManagers": ["dockerfile"],
-      "matchUpdateTypes": ["major"],
-      "groupName": "Docker base images (major)"
+      "description": "🧩 Devcontainer features",
+      "matchManagers": ["devcontainer"],
+      "matchPackagePatterns": ["features/*"],
+      "groupName": "Devcontainer features",
+      "separateMinorPatch": true
     },
 
     {
+      "description": "🐍 Python application dependencies (uv / pep621)",
       "matchManagers": ["pep621"],
       "groupName": "Python dependencies (uv)",
       "rangeStrategy": "pin",
       "separateMinorPatch": true
     },
 
     {
+      "description": "🐍 Python build tools (pip/uv/pyinstaller via regex)",
       "matchDatasources": ["pypi"],
       "groupName": "Python build tools"
     },
 
     {
+      "description": "⚙️ GitHub Actions updates (stable grouping)",
+      "matchManagers": ["github-actions"],
+      "matchUpdateTypes": ["patch", "minor"],
+      "groupName": "GitHub Actions"
+    },
+
+    {
+      "description": "⚙️ GitHub Actions major updates",
+      "matchManagers": ["github-actions"],
+      "matchUpdateTypes": ["major"],
+      "groupName": "GitHub Actions (major)"
+    },
+
+    {
+      "description": "🐧 Alpine OS safe updates only",
       "matchDatasources": ["repology"],
-      "groupName": "Alpine safe updates",
-      "matchUpdateTypes": ["patch"]
+      "matchUpdateTypes": ["patch"],
+      "groupName": "Alpine OS safe updates"
     },
 
     {
+      "description": "🚫 Disable risky OS upgrades",
       "matchDatasources": ["repology"],
       "matchUpdateTypes": ["minor", "major"],
       "enabled": false
@@ -92,7 +109,7 @@
     },
 
     {
-      "description": "Alpine apk packages (pinned versions)",
+      "description": "Alpine pinned packages in Dockerfile",
       "fileMatch": ["(^|/)Dockerfile$"],
       "matchStrings": [
         "(?<depName>curl|git|zlib|tzdata|build-base|python3-dev|libffi-dev|openssl-dev|cargo)=(?<currentValue>[^\\s\\\\]+)"