Add renovate tagging for one-password images

.github/renovate.json5

@@ -2,7 +2,8 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "github>szinn/renovate-config",
-    "github>szinn/nix-config//.github/renovate/customManagers.json5"
+    "github>szinn/nix-config//.github/renovate/customManagers.json5",
+    "github>szinn/nix-config//.github/renovate/groups.json5"
   ],
   "ignorePaths": ["result"],
 

.github/renovate/customManagers.json5

@@ -5,7 +5,7 @@
       "description": ["Process various dependencies in YAML files"],
       "fileMatch": [".+\\.ya?ml$",".+\\.nix$"],
       "matchStrings": [
-        "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*=?))?( versionTemplate=(?<versionTemplate>.*=?))?\\n.*(\"(?<currentValue>[^\"\\n]+=?)\")",
+        "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*=?))?( versionTemplate=(?<versionTemplate>.*=?))?\\n.*(\"(?<currentValue>[^\"\\n]+=?)\")"
       ],
       "datasourceTemplate": "{{#if datasource}}{{{datasource}}}{{else}}github-releases{{/if}}",
       "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver{{/if}}",

.github/renovate/groups.json5

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "packageRules": [
+    {
+      "description": ["1Password Connect"],
+      "groupName": "1Password Connect",
+      "matchPackagePatterns": ["docker.io/1password/connect"],
+      "matchDatasources": ["docker"],
+      "group": {
+        "commitMessageTopic": "{{{groupName}}} Group"
+      },
+      "separateMinorPatch": true
+    }
+  ]
+}

hosts/_modules/nixos/services/security/onepassword-connect.nix

@@ -5,6 +5,10 @@
   ...
 }: let
   cfg = config.modules.services.security.onepassword-connect;
+  # renovate: datasource=docker depName=docker.io/1password/connect-api
+  api-version = "1.7.2";
+  # renovate: datasource=docker depName=docker.io/1password/connect-sync
+  sync-version = "1.7.2";
 in
   with lib; {
     options.modules.services.security.onepassword-connect = {
@@ -32,7 +36,7 @@ in
 
       virtualisation.oci-containers.containers = {
         onepassword-connect-api = {
-          image = "docker.io/1password/connect-api:1.7.2";
+          image = "docker.io/1password/connect-api:${api-version}";
           autoStart = true;
           ports = ["${builtins.toString cfg.port}:8080"];
           volumes = [
@@ -42,7 +46,7 @@ in
         };
 
         onepassword-connect-sync = {
-          image = "docker.io/1password/connect-sync:1.7.2";
+          image = "docker.io/1password/connect-sync:${sync-version}";
           autoStart = true;
           ports = ["${builtins.toString (cfg.port + 1)}:8080"];
           volumes = [