.github/renovate.json

@@ -47,7 +47,7 @@
       "fileMatch": ["/Dockerfile$"],
       "matchStringsStrategy": "any",
       "matchStrings": [
-        "\\s\\s(?<package>[a-z0-9-]+)=(?<currentValue>[a-z0-9-_.]+)\\s+"
+        "\\s\\s(?<package>[a-z0-9-_]+)=(?<currentValue>[a-z0-9-_.]+)\\s+"
       ],
       "versioningTemplate": "loose",
       "datasourceTemplate": "repology",
@@ -65,6 +65,12 @@
       "matchDatasources": ["repology"],
       "automerge": true
     },
+    {
+      "groupName": "OpenSSL",
+      "matchDatasources": ["repology"],
+      "matchPackagePatterns": ["^alpine_.*/(libssl|libcrypto).*$"],
+      "automerge": true
+    },
     {
       "groupName": "Alpine base image",
       "matchDatasources": ["docker"]

base/Dockerfile

@@ -36,16 +36,16 @@ RUN \
         xz=5.2.9-r0 \
     \
     && apk add --no-cache \
-        libcrypto3=3.0.8-r1 \
-        libssl3=3.0.8-r1 \
+        libcrypto3=3.0.8-r2 \
+        libssl3=3.0.8-r2 \
         musl-utils=1.2.3-r4 \
         musl=1.2.3-r4 \
     \
     && apk add --no-cache \
         bash=5.2.15-r0 \
         curl=7.88.1-r1 \
         jq=1.6-r2 \
-        tzdata=2022f-r1 \
+        tzdata=2023b-r1 \
     \
     && S6_ARCH="${BUILD_ARCH}" \
     && if [ "${BUILD_ARCH}" = "i386" ]; then S6_ARCH="i686"; \