d3fc13e467
`renovatebot/github-action@v40` failed to resolve on Gitea Actions with `reference not found` when act_runner attempted the go-git clone. Whether the issue is a missing major-rolling tag upstream or a go-git tag-fetch quirk, the wrapper action is the wrong layer to fight: it just shells out to the same `renovate/renovate` image we can run ourselves. Switch to a direct `docker run renovate/renovate:40` invocation: - decouples from third-party action-tag resolution; - pins the Renovate runtime version explicitly (reproducible); - one fewer indirection to debug. The job container already has access to the host Docker daemon (per ci-runners.compose.yml mounting /var/run/docker.sock), so the sibling `docker run` works out of the box. Renovate clones the target repo itself using the API token, so no `actions/checkout` or host bind-mount is needed.