[yocaba]

What

Adds a Renovate regex manager for the runs-on inputs that osv-scanner.yml passes to Google's reusable OSV workflows.

Why

Renovate's github-actions manager reads runner labels only from a job's runs-on, so it misses with: values. #63 bumps every runner to ubuntu-26.04 except these. (flake-closure-diff.yml's input is removed in #66, so it is not covered here.)

Testing

renovate-config-validator passes. A local renovate --platform=local --dry-run=lookup reports both osv-scanner.yml values as ubuntu 24.04 → 26.04 on the github-runners datasource.

Checklist

• Tests added/updated, or confirmed that no tests are required
• No breaking changes, or upgrade path documented above
• Readable commit history (squashed and cleaned up as desired)
• AI code review considered and comments resolved

Summary by CodeRabbit

• Chores
  • Added automated tracking for Ubuntu-based runner versions used by project workflows.
  • Supports both standard and ARM runner variants.
  • Helps keep workflow execution environments aligned with available runner updates.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 15482c78-6495-40ef-8890-e01b3eb9270e

📥 Commits

Reviewing files that changed from the base of the PR and between 9f2a847 and 6f5c5f5.

📒 Files selected for processing: 1

• renovate.json

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📝 Walkthrough

Renovate now detects Ubuntu runner versions, including optional ARM variants, in reusable-workflow inputs in the OSV Scanner workflow.

Changes: Runner version updates

Layer / File(s)	Summary
Detect runner labels renovate.json	A Renovate custom manager matches numeric Ubuntu runner versions with optional ARM suffixes. It uses the github-runners datasource and github-runner dependency type.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Suggested reviewers: alexhardatwork

Merge Risk: ⚪ Minimal · up to 6f5c5

No actionable merge-blocking risk remains.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly summarizes the change: Renovate will track runner inputs in reusable workflows.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.
Description check		The pull request description includes the required What, Why, Testing, and Checklist sections. It explains the problem, the Renovate configuration change, the validation performed, and checklist compl…

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Description check

Explanation

The pull request description includes the required What, Why, Testing, and Checklist sections. It explains the problem, the Renovate configuration change, the validation performed, and checklist completion. The template's explicit "Closes #" line is not included, but the description references issue #63 and is otherwise complete.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}