Keep atlantis-base and atlantis docker image dependencies up to date

[nitrocode]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request. Searching for pre-existing feature requests helps us consolidate datapoints for identical requirements into a single place, thank you!
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.
• If you are interested in working on this issue or have submitted a pull request, please leave a comment.

---

• I'd be willing to implement this feature (contributing guide)

Describe the user story

It would be nice to automate PRs like this #2889 for all of the apk and apt installs to keep the dependents up to date

Renovatebot cannot find the replaceString for the atlantis-base at the moment

Describe the solution you'd like

Some changes to consider

1. Use alpine/debian package specific renovatebot comments to auto update

   • ATLANTIS_BASE_TAG_DATE

   • atlantis/.github/renovate.json5

     Lines 68 to 78 in d736250

     	{
     	fileMatch: ["(^|/)Dockerfile$", "(^|/)Dockerfile\\.[^/]*$"],
     	matchStrings: [
     	// example:
     	// renovate: datasource=github-releases depName=hashicorp/terraform versioning=hashicorp
     	// ENV DEFAULT_TERRAFORM_VERSION=x.x.x
     	"renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\sENV .*?_VERSION=(?<currentValue>.*)\\s",
     	],
     	versioningTemplate: "{{#if versioning}}{{{versioning}}}{{else}}semver{{/if}}",
     	extractVersionTemplate: '^v(?<version>\\d+\\.\\d+\\.\\d+)',
     	},

   • atlantis/Dockerfile

     Lines 23 to 24 in d736250

     	# renovate: datasource=github-releases depName=hashicorp/terraform versioning=hashicorp
     	ENV DEFAULT_TERRAFORM_VERSION=1.3.7

   • atlantis/Dockerfile

     Line 2 in d736250

     ARG ATLANTIS_BASE_TAG_DATE=2023.01.11

   • atlantis/Dockerfile

     Line 17 in d736250

     FROM ${ATLANTIS_BASE}:${ATLANTIS_BASE_TAG_DATE}-${ATLANTIS_BASE_TAG_TYPE} AS base

2. Explicitly set package repos to prevent breaking changes

3. Use semver tilde pinnings (not the best but may reduce breakages)

Other changes we could make

• build latest-alpine and latest-debian tags
• set a cron to build the base and real images
• set real images to use the latest tag for atlantis-base

Describe the drawbacks of your solution

More PRs

Describe alternatives you've considered

Manual updates