From 5598ad359f6dc62a57e9f3060be421070b3b60a5 Mon Sep 17 00:00:00 2001
From: Fabian Koller <github@kthxbye.cyou>
Date: Fri, 26 Jun 2026 10:26:36 +0200
Subject: [PATCH] Track upstream gardenlinux/rel-1877 via Renovate

Adds an overlay customManager that bumps the pinned `uses:` SHAs in
`.github/workflows/*.yml` to upstream rel-1877 HEAD, and sets
`branch = rel-1877` in .gitmodules so the git-submodules manager
tracks the same release line.
---
 .gitmodules   |  1 +
 renovate.json | 19 +++++++++++++++++++
 2 files changed, 20 insertions(+)

diff --git a/.gitmodules b/.gitmodules
index 28f984dd..ed8a3a6a 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -1,3 +1,4 @@
 [submodule "gardenlinux"]
 	path = gardenlinux
 	url = https://github.com/gardenlinux/gardenlinux
+	branch = rel-1877
diff --git a/renovate.json b/renovate.json
index 1ba6e4a3..9074fd04 100644
--- a/renovate.json
+++ b/renovate.json
@@ -39,6 +39,25 @@
       "extractVersionTemplate": "^(?<version>.+)\\+bp1877$",
       "versioningTemplate": "loose",
       "autoReplaceStringTemplate": "EDK2_VERSION=\"{{{newValue}}}%2Bbp1877\""
+    },
+    {
+      "customType": "regex",
+      "managerFilePatterns": ["/^\\.github/workflows/.+\\.ya?ml$/"],
+      "matchStrings": [
+        "uses:\\s*gardenlinux/gardenlinux/\\.github/workflows/[^@\\s]+@(?<currentDigest>[a-f0-9]{40})"
+      ],
+      "depNameTemplate": "gardenlinux/gardenlinux",
+      "packageNameTemplate": "https://github.com/gardenlinux/gardenlinux",
+      "datasourceTemplate": "git-refs",
+      "currentValueTemplate": "rel-1877"
+    }
+  ],
+  "packageRules": [
+    {
+      "matchDatasources": ["git-refs"],
+      "matchDepNames": ["gardenlinux/gardenlinux", "gardenlinux"],
+      "versioning": "loose",
+      "allowedVersions": "/^rel-1877$/"
     }
   ]
 }