Repository navigation
Renovate #33
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Renovate | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| logLevel: | |
| description: "Override default log level" | |
| required: false | |
| default: info | |
| type: choice | |
| options: | |
| - info | |
| - debug | |
| overrideSchedule: | |
| description: "Override all schedules" | |
| required: false | |
| default: "false" | |
| type: choice | |
| options: | |
| - "false" | |
| - "true" | |
| configMigration: | |
| description: "Toggle PRs for config migration" | |
| required: false | |
| default: "true" | |
| type: choice | |
| options: | |
| - "false" | |
| - "true" | |
| renovateConfig: | |
| description: "Define a custom renovate config file" | |
| required: false | |
| default: ".github/renovate.json" | |
| type: string | |
| minimumReleaseAge: | |
| description: "Override minimumReleaseAge for a one-time run (e.g., '0 days' to disable delay)" | |
| required: false | |
| default: "null" | |
| type: string | |
| schedule: | |
| - cron: '30 4,6 * * 1-5' | |
| permissions: {} | |
| jobs: | |
| call-workflow: | |
| permissions: | |
| contents: read | |
| id-token: write # Required for Vault OIDC authentication. | |
| # https://github.com/rancher/renovate-config/releases | |
| uses: rancher/renovate-config/.github/workflows/renovate-vault.yml@a1a645d20a4c3d46bc5d1a00f45b87362fce5abc # v1.0.9 | |
| # Note: github.event.inputs.<name> with '||' fallbacks is used across all inputs | |
| # so that scheduled cron runs (where github.event.inputs is null) safely default. | |
| with: | |
| configMigration: ${{ github.event.inputs.configMigration || 'true' }} | |
| logLevel: ${{ github.event.inputs.logLevel || 'info' }} | |
| overrideSchedule: ${{ github.event.inputs.overrideSchedule || 'false' }} | |
| renovateConfig: ${{ github.event.inputs.renovateConfig || '.github/renovate.json' }} | |
| minimumReleaseAge: ${{ github.event.inputs.minimumReleaseAge || 'null' }} | |
| secrets: | |
| # Optional: RENOVATE_FORK_GH_TOKEN allows this action to run on repository forks where | |
| # Vault/App token generation is unavailable. Defaulting to '' allows the caller | |
| # to fall back gracefully on standard runs without failing secret evaluation. | |
| override-token: "${{ secrets.RENOVATE_FORK_GH_TOKEN || '' }}" |