From 6522707b49e38f8402426a9b456cd6d9c0e50916 Mon Sep 17 00:00:00 2001
From: bo0tzz <git@bo0tzz.me>
Date: Tue, 28 Nov 2023 21:50:48 +0100
Subject: [PATCH] chore(renovate): Only update to node LTS versions (#5355)

* chore(ci): Use LTS codenames for node base images

* chore(renovate): Only match node LTS versions

* chore(renovate): Pin docker digests
---
 renovate.json     | 8 +++++++-
 server/Dockerfile | 2 +-
 web/Dockerfile    | 2 +-
 3 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/renovate.json b/renovate.json
index d54bcce64f..ac8b22abc2 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,6 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:base"],
+  "extends": ["config:base", "docker:pinDigests"],
   "minimumReleaseAge": "5",
   "packageRules": [
     {
@@ -47,6 +47,12 @@
     {
       "groupName": "base-image",
       "matchPackagePrefixes": ["ghcr.io/immich-app/base-server"]
+    },
+    {
+      "matchDatasources": ["docker"],
+      "matchPackageNames": ["node"],
+      "versionCompatibility": "^(?<version>[^-]+)(?<compatibility>-.*)?$",
+      "versioning": "node"
     }
   ],
   "ignoreDeps": [
diff --git a/server/Dockerfile b/server/Dockerfile
index 05332e3b0c..0f17035c9c 100644
--- a/server/Dockerfile
+++ b/server/Dockerfile
@@ -13,7 +13,7 @@ RUN npm run build
 RUN npm prune --omit=dev --omit=optional
 
 # web build
-FROM node:20.10-alpine3.18 as web
+FROM node:iron-alpine3.18 as web
 
 WORKDIR /usr/src/app
 COPY web/package.json web/package-lock.json ./
diff --git a/web/Dockerfile b/web/Dockerfile
index 33555c87fe..179d4d9124 100644
--- a/web/Dockerfile
+++ b/web/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:20.10-alpine3.18
+FROM node:iron-alpine3.18
 
 WORKDIR /usr/src/app
 COPY --chown=node:node package*.json ./