From 8204e97a98aef628137e8eb29349d61ffab5b538 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?David=20Barrag=C3=A1n=20Merino?=
 <david.barragan@kaleidos.net>
Date: Tue, 6 Oct 2026 15:31:27 +0000
Subject: [PATCH] :wrench: Manage GitHub Actions with Renovate
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: David Barragán Merino <david.barragan@kaleidos.net>
---
 .github/workflows/build-renovate.yml | 6 +++++-
 renovate.json                        | 1 +
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build-renovate.yml b/.github/workflows/build-renovate.yml
index bb7b9d9b40..6156aed086 100644
--- a/.github/workflows/build-renovate.yml
+++ b/.github/workflows/build-renovate.yml
@@ -28,6 +28,7 @@ jobs:
       contents: read
     outputs:
       short_sha: ${{ steps.bundle.outputs.short_sha }}
+      images: ${{ steps.changes.outputs.images }}
       devenv: ${{ steps.changes.outputs.devenv }}
       imagemagick: ${{ steps.changes.outputs.imagemagick }}
 
@@ -49,9 +50,11 @@ jobs:
           BASE_SHA: ${{ steps.base.outputs.sha }}
         run: |
           changed() {
-            git diff --quiet "$BASE_SHA" HEAD -- "$1" && echo false || echo true
+            git diff --quiet "$BASE_SHA" HEAD -- "$@" && echo false || echo true
           }
           {
+            # Anything outside .github can affect the production images.
+            echo "images=$(changed . ':!.github')"
             echo "devenv=$(changed docker/devenv)"
             echo "imagemagick=$(changed docker/imagemagick)"
           } >> "$GITHUB_OUTPUT"
@@ -85,6 +88,7 @@ jobs:
     runs-on: penpot-standar-runner
     timeout-minutes: 60
     needs: prepare
+    if: needs.prepare.outputs.images == 'true'
     permissions:
       contents: read
     strategy:
diff --git a/renovate.json b/renovate.json
index bfe3f97ff5..1d7acb30de 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,6 +1,7 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": ["github>penpot/renovate-config"],
+  "labels": ["dependencies", "team infra", "no issue required"],
   "semanticCommits": "disabled",
   "commitMessagePrefix": ":arrow_up:",
   "commitMessageAction": "Update",