From 41138c049a55fe6848c63bdafb0d20d31dd6a6fd Mon Sep 17 00:00:00 2001
From: =?utf8?q?J=C3=A9r=C3=B4me=20Benoit?= <jerome.benoit@piment-noir.org>
Date: Fri, 11 Sep 2026 18:13:11 +0200
Subject: [PATCH] fix(renovate): anchor managed version values to digit-start

Require managed version values to start with a digit in both Dockerfile ARG and compose matchStrings. Kills the false-positive class where any *_version key with a non-version scalar (e.g. latest, stable) becomes a pypi lookup. Verified no-op on the current corpus: identical 26-capture set before/after.
---
 renovate.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/renovate.json b/renovate.json
index 7cb4163..e9263da 100644
--- a/renovate.json
+++ b/renovate.json
@@ -13,8 +13,8 @@
       "customType": "regex",
       "managerFilePatterns": ["**/Dockerfile*", "**/docker-compose*.yml"],
       "matchStrings": [
-        "ARG\\s+(?<depName>\\w+)_version=(?<currentValue>[^\\s]+)",
-        "\\s+(?<depName>\\w+)_version:\\s*(?<currentValue>[^\\s]+)"
+        "ARG\\s+(?<depName>\\w+)_version=(?<currentValue>\\d[^\\s]*)",
+        "\\s+(?<depName>\\w+)_version:\\s*(?<currentValue>\\d[^\\s]*)"
       ],
       "datasourceTemplate": "pypi",
       "depNameTemplate": "{{{replace '_' '-' depName}}}"
-- 
2.53.0