From 40fd4c4a1a4f7c0f5c8982f1ad0a432dbda3e4a8 Mon Sep 17 00:00:00 2001
From: Stefan Reimer <stefan@zero-downtime.net>
Date: Wed, 11 Jun 2025 17:44:43 +0000
Subject: [PATCH] ci: pin Alpine version to patch level

---
 Dockerfile    | 2 +-
 renovate.json | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 1c45cfb..cd53d21 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM    alpine:3.21
+FROM    alpine:3.21.3
 ARG     ALPINE="v3.21"
 ARG     BUILDUSER=alpine
 
diff --git a/renovate.json b/renovate.json
index b637364..03659e4 100644
--- a/renovate.json
+++ b/renovate.json
@@ -13,7 +13,7 @@
       "groupName": "nvidia-drivers"
     },
     {
-      "matchPackageNames": ["kubernetes-sigs/cri-tools","kubernetes/cloud-provider-aws","kubernetes/kubernetes"],
+      "matchPackageNames": ["alpine", "kubernetes-sigs/cri-tools","kubernetes/cloud-provider-aws","kubernetes/kubernetes"],
       "separateMinorPatch": true
     }
   ],