Skip to content

🤖 Renovate

🤖 Renovate #32

Workflow file for this run

---
name: "\U0001F916 Renovate"
on:
push:
branches: ["main"]
paths:
- .github/renovate.json5
schedule:
# Run every week on sunday and wednesday at 00:00 UTC
- cron: "0 0 * * 0,3"
workflow_dispatch:
inputs:
dryRun:
description: Dry Run
type: boolean
default: false
required: true
logLevel:
description: Log Level
type: choice
default: info
options:
- debug
- info
required: true
version:
description: Renovate Version
default: latest
required: true
concurrency:
cancel-in-progress: true
group: ${{ github.workflow }}-${{ github.event.number || github.ref }}
# Retrieve BOT_USER_ID via `curl -s "https://api.github.com/users/${BOT_USERNAME}%5Bbot%5D" | jq .id`
env:
RENOVATE_ONBOARDING_CONFIG_FILE_NAME: .github/renovate.json5
RENOVATE_GIT_AUTHOR: "${{ secrets.BOT_USERNAME }} <${{ secrets.BOT_USER_ID }}+${{ secrets.BOT_USERNAME }}[bot]@users.noreply.github.com>"
# Permissions block for GitHub App
permissions:
contents: write
issues: write
pull-requests: write
statuses: read
jobs:
renovate:
name: Renovate
runs-on: ubuntu-latest
steps:
- name: Generate Token
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
id: app-token
with:
app-id: "${{ secrets.BOT_APP_ID }}"
private-key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
token: "${{ steps.app-token.outputs.token }}"
- name: Renovate
uses: renovatebot/github-action@693b9ef15eec82123529a37c782242f091365961 # v46.1.14
env:
LOG_LEVEL: "${{ inputs.logLevel || 'info' }}"
RENOVATE_AUTODISCOVER: true
RENOVATE_AUTODISCOVER_FILTER: "${{ github.repository }}"
RENOVATE_DRY_RUN: "${{ inputs.dryRun }}"
RENOVATE_INTERNAL_CHECKS_FILTER: strict
RENOVATE_PLATFORM: github
RENOVATE_PLATFORM_COMMIT: true
with:
configurationFile: "${{ env.RENOVATE_ONBOARDING_CONFIG_FILE_NAME }}"
token: "${{ steps.app-token.outputs.token }}"
renovate-version: "${{ inputs.version || 'full' }}"