renovate: run update_artifacts_lockfile as postUpgradeTasks

ci/hermetic/update_artifacts_lockfile

@@ -21,6 +21,7 @@ from ruamel.yaml import YAML
 import requests
 import hashlib
 import os
+import sys
 from typing import List, Dict, Any, Optional
 
 
@@ -149,5 +150,5 @@ if __name__ == "__main__":
     # This script will attempt to load and update 'artifacts.lock.yaml'
     # in the current directory. Make sure this file exists and is
     # correctly formatted before running.
-    artifacts_lock_filename: str = "artifacts.lock.yaml"
+    artifacts_lock_filename: str = sys.argv[1] if len(sys.argv) > 1 else "artifacts.lock.yaml"
     update_artifact_checksums(artifacts_lock_filename)

renovate.json

@@ -44,7 +44,16 @@
       "matchDatasources": [
         "custom.oc"
       ],
-      "extractVersion": "openshift-client-linux-(?<version>.+)\\.tar\\.gz"
+      "extractVersion": "openshift-client-linux-(?<version>.+)\\.tar\\.gz",
+      "postUpgradeTasks": {
+        "commands": [
+          "update_artifacts_lockfile ci/hermetic/artifacts.lock.yaml"
+        ],
+        "executionMode": "branch",
+        "fileFilters": [
+          "ci/hermetic/artifacts.lock.yaml"
+        ]
+      }
     }
   ],
   "customManagers": [