`renovatebot/github-action@v40` failed to resolve on Gitea Actions
with `reference not found` when act_runner attempted the go-git
clone. Whether the issue is a missing major-rolling tag upstream or
a go-git tag-fetch quirk, the wrapper action is the wrong layer to
fight: it just shells out to the same `renovate/renovate` image we
can run ourselves.
Switch to a direct `docker run renovate/renovate:40` invocation:
- decouples from third-party action-tag resolution;
- pins the Renovate runtime version explicitly (reproducible);
- one fewer indirection to debug.
The job container already has access to the host Docker daemon
(per ci-runners.compose.yml mounting /var/run/docker.sock), so the
sibling `docker run` works out of the box. Renovate clones the
target repo itself using the API token, so no `actions/checkout`
or host bind-mount is needed.
Julien Gautier