From 95920f8756d65a84917374f74dd883e92c897b2e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 11 Dec 2025 16:47:32 -0800
Subject: [PATCH 1/3] Add Renovate configuration

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 .github/renovate.json | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 .github/renovate.json

diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 00000000..1501eda2
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,10 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ],
+  "pinDigests": true,
+  "prConcurrentLimit": 0,
+  "branchConcurrentLimit": 0,
+  "prHourlyLimit": 0
+}

From 28712e359fc843fb29449d411d8a9f928f62d27c Mon Sep 17 00:00:00 2001
From: Manfred Moser <manfred@simpligility.ca>
Date: Fri, 27 Feb 2026 15:44:30 -0800
Subject: [PATCH 2/3] Add Renovate regex manager for Chainguard MinIO container
 digest

Configure a custom regex manager so Renovate can detect and update the
cgr.dev/chainguard/minio digest pinned in S3Container.java.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .github/renovate.json | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/.github/renovate.json b/.github/renovate.json
index 1501eda2..377cc593 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -6,5 +6,19 @@
   "pinDigests": true,
   "prConcurrentLimit": 0,
   "branchConcurrentLimit": 0,
-  "prHourlyLimit": 0
+  "prHourlyLimit": 0,
+  "customManagers": [
+    {
+      "customType": "regex",
+      "managerFilePatterns": [
+        "trino-aws-proxy/src/test/java/io/trino/aws/proxy/server/testing/containers/S3Container.java"
+      ],
+      "matchStrings": [
+        "cgr\\.dev/chainguard/minio@(?<currentDigest>sha256:[a-f0-9]+)"
+      ],
+      "depNameTemplate": "cgr.dev/chainguard/minio",
+      "datasourceTemplate": "docker",
+      "currentValueTemplate": "latest"
+    }
+  ]
 }

From d881af0225edecc9f77c758671fc93a05f48263f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 28 Feb 2026 00:38:48 +0000
Subject: [PATCH 3/3] Pin dependencies

---
 .github/workflows/maven.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index ca7689c8..430476e7 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -20,10 +20,10 @@ jobs:
 
     steps:
     - name: Checkout project
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
     - name: Set up JDK
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@17f84c3641ba7b8f6deff6309fc4c864478f5d62 # v3
       with:
         java-version: '22'
         distribution: 'temurin'