Skip to content

Test Renovate batch and remove Docker as a dependency#100

Merged
maxdymond merged 12 commits into
mainfrom
md/renovate-batch
Jul 22, 2026
Merged

Test Renovate batch and remove Docker as a dependency#100
maxdymond merged 12 commits into
mainfrom
md/renovate-batch

Conversation

@maxdymond

Copy link
Copy Markdown
Member

No description provided.

renovate Bot and others added 11 commits May 26, 2026 15:28
…geaccounts-20250801.x' into md/renovate-batch
…geaccounts-blobservices-20250801.x' into md/renovate-batch
…geaccounts-blobservices-containers-20250801.x' into md/renovate-batch
azure-functions v2 (merged from renovate/azure-functions-2.x) requires
Python >=3.13. Bump the Flex Consumption runtime to 3.13 (rg_funcapp.bicep),
the project floor to >=3.13, ruff target to py313, and the CI matrix to 3.13,
and relock.

The 3.11 core-tools image still deploys the 3.13 app: with --build remote the
build runs on Azure at the target runtime, so the image's local Python is
irrelevant (no 3.12/3.13 core-tools image is published). Verified end-to-end:
no-shared-keys + signing deploy succeeds, app runs 3.13, KV reference resolves.
@maxdymond
maxdymond force-pushed the md/renovate-batch branch from acec0de to acec0de Compare July 22, 2026 13:50
The FuncAppBundle path (used when shared-key access is disabled) previously
ran 'func azure functionapp publish' inside the core-tools Docker image. Both
'az functionapp deployment source config-zip' and 'az functionapp deploy'
route through SCM basic auth, which is disabled on these apps (HTTP 403), which
is why Docker + func was used.

Instead, POST the zip straight to the One Deploy endpoint (/api/publish) with
an AAD bearer token via urllib, then poll /api/deployments/latest. This needs
only the Azure CLI (for the token) plus the standard library -- no Docker and
no Azure Functions Core Tools, so an ordinary user can run it.

Share the zip-building between FuncAppZip and FuncAppBundle via
build_function_zip(). Update README to drop the Docker requirement.

Verified end-to-end: fresh no-shared-keys + signing deploy succeeds, app runs
3.13, and the GPG Key Vault reference resolves.
@maxdymond
maxdymond force-pushed the md/renovate-batch branch from acec0de to acec0de Compare July 22, 2026 13:52
@maxdymond
maxdymond merged commit 77e097b into main Jul 22, 2026
4 checks passed
@maxdymond
maxdymond deleted the md/renovate-batch branch July 22, 2026 13:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant