Update all non-major dependencies #40

	name: CI

	on:
	push:
	branches:
	- main
	- 'renovate/**'
	pull_request:
	branches: [main]
	workflow_dispatch:

	permissions:
	contents: read

	jobs:
	validate:
	name: Build
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v6
	with:
	fetch-depth: 2

	- name: Install pnpm
	uses: pnpm/action-setup@v6
	with:
	run_install: false

	- name: Setup Node.js
	uses: actions/setup-node@v6
	with:
	node-version: 24
	cache: "pnpm"

	- name: Install dependencies
	run: pnpm install --frozen-lockfile

	- name: Run CI Tasks (Turbo)
	run: pnpm turbo validate:build

	publish:
	name: Publish image
	runs-on: ubuntu-latest
	needs: validate
	if: github.event_name == 'push' && github.ref_name == 'main'
	steps:
	- name: Checkout
	uses: actions/checkout@v6

	- name: Generate image tag
	id: image
	shell: bash
	run: \|
	branch="$(printf '%s' "$GITHUB_REF_NAME" \| tr '[:upper:]' '[:lower:]' \| sed -E 's/[^a-z0-9]+/-/g; s/^-+//; s/-+$//; s/-+/-/g')"
	if [ -z "$branch" ]; then
	branch="unknown"
	fi

	short_sha="${GITHUB_SHA::7}"
	timestamp="$(date +%s)"

	tag="${branch}-${short_sha}-${timestamp}"

	echo "tag=${tag}" >> "$GITHUB_OUTPUT"

	- name: Login to Harbor
	uses: docker/login-action@v4
	with:
	registry: ${{ secrets.REGISTRY_URL }}
	username: ${{ secrets.REGISTRY_USERNAME }}
	password: ${{ secrets.REGISTRY_PASSWORD }}

	- name: Build and push image
	uses: docker/build-push-action@v7
	with:
	context: .
	push: true
	tags: ${{ secrets.REGISTRY_URL }}/web/howto:${{ steps.image.outputs.tag }}

Provide feedback