From 29e2cd16905f6e2aada5422187ee7e3d3fe21f0c Mon Sep 17 00:00:00 2001 From: williaby <67131297+williaby@users.noreply.github.com> Date: Thu, 2 Jul 2026 10:42:51 -0700 Subject: [PATCH] fix(renovate): drop followTag on retired v1 floating tag The org tag-protection ruleset forbids re-pointing v* tags, so the floating v1 tag froze at the v1.1.0 commit; followTag "v1" therefore froze all org-workflow SHA-pin updates at v1.1.0-era code. Plain semver tracking of the immutable vX.Y.Z release tags (cut on every push to the source repo's main) restores update delivery. Companion to ByronWilliamsCPA/.github#244 and ByronWilliamsCPA/.claude#251 (CI-057 inversion). --- renovate.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/renovate.json b/renovate.json index d0c73ac..da23d03 100644 --- a/renovate.json +++ b/renovate.json @@ -64,7 +64,7 @@ ] }, { - "description": "Track org workflow floating v1 tag for SHA pin updates", + "description": "Advance org reusable-workflow SHA pins to the latest semver release tag. No followTag: the org tag-protection ruleset makes every vX.Y.Z tag immutable and no floating major tag exists, so a followed tag would freeze pins permanently.", "matchManagers": [ "github-actions" ], @@ -72,9 +72,9 @@ "ByronWilliamsCPA/.github", "williaby/.github" ], - "followTag": "v1", "automerge": false, - "groupName": "Org Workflow SHAs" + "groupName": "Org Workflow SHAs", + "versioning": "semver" } ], "enabledManagers": [