ci(Renovate): Add force-update input to Renovate workflow by khvn26 · Pull Request #8048 · Flagsmith/flagsmith

khvn26 · 2026-07-20T13:35:15Z

Thanks for submitting a PR! Please check the boxes below:

I have read the Contributing Guide.
I have added information to docs/ if required so people know about the feature.
I have filled in the "Changes" section below.
I have filled in the "How did you test this code" section below.

Changes

Sometimes we need to perform a targeted dependency bump. In this PR, we're adding support for packages input to the Renovate workflow that should help automate this.

How did you test this code?

This is a CI change.

Adds an optional `packages` workflow_dispatch input that force-enables the named packages for a single run via RENOVATE_FORCE, allowing out-of-band bumps despite the security-only-updates preset. Empty input leaves scheduled runs unchanged. beep boop

vercel · 2026-07-20T13:35:17Z

The latest updates on your projects. Learn more about Vercel for GitHub.

3 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
docs	Ignored	Preview	Jul 20, 2026 4:08pm
flagsmith-frontend-preview	Ignored	Preview	Jul 20, 2026 4:08pm
flagsmith-frontend-staging	Ignored	Preview	Jul 20, 2026 4:08pm

github-actions · 2026-07-20T13:36:23Z

Docker builds report

Image	Build Status	Security report
`ghcr.io/flagsmith/flagsmith-api-test:pr-8048`	Finished ✅	Skipped
`ghcr.io/flagsmith/flagsmith-e2e:pr-8048`	Finished ✅	Skipped
`ghcr.io/flagsmith/flagsmith-frontend:pr-8048`	Finished ✅	Results ✅
`ghcr.io/flagsmith/flagsmith-api:pr-8048`	Finished ✅	Results ✅
`ghcr.io/flagsmith/flagsmith:pr-8048`	Finished ✅	Results ✅
`ghcr.io/flagsmith/flagsmith-private-cloud:pr-8048`	Finished ✅	Results ✅

coderabbitai · 2026-07-20T13:40:36Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: ff2bafc8-820f-4b16-afc7-495af916467f

📥 Commits

Reviewing files that changed from the base of the PR and between 4d49c3c and 3de7669.

📒 Files selected for processing (1)

.github/workflows/renovate.yml

📝 Walkthrough

Walkthrough

The Renovate workflow now supports manual triggering with an optional comma-separated package input. A new step trims and filters the package list, builds matching Renovate packageRules, and exposes the JSON as RENOVATE_FORCE for the Renovate action. Related GitHub App token and Renovate action versions were also updated.

Estimated code review effort: 2 (Simple) | ~10 minutes

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

codecov · 2026-07-20T13:42:40Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.65%. Comparing base (0838195) to head (3de7669).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff            @@
##             main    #8048    +/-   ##
========================================
  Coverage   98.64%   98.65%            
========================================
  Files        1506     1512     +6     
  Lines       59573    59971   +398     
========================================
+ Hits        58767    59165   +398     
  Misses        806      806

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

github-actions · 2026-07-20T13:43:44Z

✅ private-cloud · depot-ubuntu-latest-16 — run #18536 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

2 passed

Details

2 tests across 2 suites
35 seconds
3de7669
🔄 Run: #18536 (attempt 1)

🗂️ Previous results

✅ private-cloud · depot-ubuntu-latest-arm-16 — run #18536 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

2 passed

Details

2 tests across 2 suites
6.9 seconds
3de7669
🔄 Run: #18536 (attempt 1)

✅ oss · depot-ubuntu-latest-16 — run #18536 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-16)

1 passed

Details

1 test across 1 suite
43.6 seconds
3de7669
🔄 Run: #18536 (attempt 1)

✅ oss · depot-ubuntu-latest-arm-16 — run #18536 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

1 passed

Details

1 test across 1 suite
38.4 seconds
3de7669
🔄 Run: #18536 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-16 — run #18532 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

3 passed

Details

3 tests across 3 suites
1 minute, 3 seconds
4d49c3c
🔄 Run: #18532 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-arm-16 — run #18532 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

4 passed

Details

4 tests across 4 suites
36.2 seconds
4d49c3c
🔄 Run: #18532 (attempt 1)

✅ oss · depot-ubuntu-latest-arm-16 — run #18532 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

1 passed

Details

1 test across 1 suite
6.7 seconds
4d49c3c
🔄 Run: #18532 (attempt 1)

✅ oss · depot-ubuntu-latest-16 — run #18532 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-16)

1 passed

Details

1 test across 1 suite
37 seconds
4d49c3c
🔄 Run: #18532 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-16 — run #18530 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

2 passed

Details

2 tests across 2 suites
47.1 seconds
8186cb8
🔄 Run: #18530 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-arm-16 — run #18530 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

1 passed

Details

1 test across 1 suite
37.4 seconds
8186cb8
🔄 Run: #18530 (attempt 1)

✅ oss · depot-ubuntu-latest-16 — run #18530 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-16)

2 passed

Details

2 tests across 2 suites
33.5 seconds
8186cb8
🔄 Run: #18530 (attempt 1)

✅ oss · depot-ubuntu-latest-arm-16 — run #18530 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

1 passed

Details

1 test across 1 suite
46.8 seconds
8186cb8
🔄 Run: #18530 (attempt 1)

coderabbitai

Actionable comments posted: 2

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 103bf55b-b787-4a2c-afa9-0cfe70329c6c

📥 Commits

Reviewing files that changed from the base of the PR and between 0838195 and 8186cb8.

📒 Files selected for processing (1)

.github/workflows/renovate.yml

github-actions · 2026-07-20T13:45:22Z

Visual Regression

19 screenshots compared. See report for details.
View full report

emyller

Good idea, one optional suggestion.

Replaces the jq/shell snippet with a `shell: python` step. Keeps the input in an env var rather than interpolating it into the script body, avoiding injection. beep boop

khvn26 requested a review from a team as a code owner July 20, 2026 13:35

khvn26 requested review from emyller and removed request for a team July 20, 2026 13:35

github-actions Bot added the ci-cd Build, test and deployment related label Jul 20, 2026

coderabbitai Bot reviewed Jul 20, 2026

View reviewed changes

Comment thread .github/workflows/renovate.yml Outdated

Comment thread .github/workflows/renovate.yml Outdated

pin actions to SHAs

4d49c3c

github-actions Bot added ci-cd Build, test and deployment related and removed ci-cd Build, test and deployment related labels Jul 20, 2026

emyller previously approved these changes Jul 20, 2026

View reviewed changes

Comment thread .github/workflows/renovate.yml Outdated

ci(Renovate): Compute force override in Python instead of jq

3de7669

Replaces the jq/shell snippet with a `shell: python` step. Keeps the input in an env var rather than interpolating it into the script body, avoiding injection. beep boop

khvn26 dismissed emyller’s stale review via 3de7669 July 20, 2026 16:08

khvn26 requested a review from emyller July 20, 2026 16:08

github-actions Bot added ci-cd Build, test and deployment related and removed ci-cd Build, test and deployment related labels Jul 20, 2026

emyller approved these changes Jul 20, 2026

View reviewed changes

khvn26 merged commit b349c60 into main Jul 20, 2026
35 checks passed

khvn26 deleted the chore/renovate-force-package-input branch July 20, 2026 17:16

flagsmith-engineering Bot mentioned this pull request Jul 20, 2026

chore(main): release 2.255.0 #8031

Open

Uh oh!

Conversation

khvn26 commented Jul 20, 2026

Changes

How did you test this code?

Uh oh!

vercel Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Docker builds report

Uh oh!

coderabbitai Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Uh oh!

codecov Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

Details

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

Details

Playwright Test Results (oss - depot-ubuntu-latest-16)

Details

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

Details

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

Details

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

Details

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

Details

Playwright Test Results (oss - depot-ubuntu-latest-16)

Details

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

Details

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

Details

Playwright Test Results (oss - depot-ubuntu-latest-16)

Details

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

Details

Uh oh!

coderabbitai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Visual Regression

Uh oh!

emyller left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

vercel Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

coderabbitai Bot commented Jul 20, 2026 •

edited

Loading

codecov Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading