Renovate #1707
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Renovate | |
| on: | |
| schedule: | |
| # Match renovate schedule:earlyMondays and schedule:automergeMonthly | |
| - cron: '*/15 0-3 * * *' | |
| workflow_dispatch: | |
| jobs: | |
| renovate: | |
| container: | |
| env: | |
| LOG_LEVEL: debug | |
| RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS: '["^git", "^find"]' | |
| RENOVATE_BRANCH_PREFIX: renovate-github/ | |
| RENOVATE_ENABLED: ${{ vars.RENOVATE_ENABLED || true }} | |
| RENOVATE_ENABLED_MANAGERS: '["pep621", "copier", "github-actions", "regex", "pre-commit"]' | |
| RENOVATE_OPTIMIZE_FOR_DISABLED: 'true' | |
| RENOVATE_PLATFORM: github | |
| RENOVATE_REPOSITORIES: '["${{ github.repository }}"]' | |
| RENOVATE_REPOSITORY_CACHE: enabled | |
| image: ghcr.io/renovatebot/renovate:41.168.1@sha256:55bbf6de01fd59f24a9e96c5907bf12b4c53c631e82e0f2b87444a7f257fcbb3 | |
| options: --user root | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - run: env | sort | |
| - name: Generate a token with GitHub App if App ID exists | |
| id: generate-token | |
| if: vars.BOT_APP_ID | |
| uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2 | |
| with: | |
| app-id: ${{ vars.BOT_APP_ID }} | |
| private-key: ${{ secrets.BOT_PRIVATE_KEY }} | |
| - name: Warn if RENOVATE_GIT_AUTHOR is set while using GitHub App token | |
| if: steps.generate-token.outputs.token && vars.RENOVATE_GIT_AUTHOR | |
| run: | | |
| echo "# :warning: `RENOVATE_GIT_AUTHOR` is set explicitly while using GitHub App token" >> $GITHUB_STEP_SUMMARY | |
| echo "Generally, Renovate automatically detects the git author and email using the token. However, explicitly setting the `RENOVATE_GIT_AUTHOR` will override this behavior." >> $GITHUB_STEP_SUMMARY | |
| - name: Run Renovate | |
| env: | |
| RENOVATE_PLATFORM_COMMIT: ${{ steps.generate-token.outputs.token && true || false }} | |
| RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN || steps.generate-token.outputs.token }} | |
| RENOVATE_GIT_AUTHOR: ${{ vars.RENOVATE_GIT_AUTHOR }} | |
| run: | | |
| if [ -z "$RENOVATE_TOKEN" ]; then | |
| echo "RENOVATE_TOKEN is not properly configured, skipping ..." | |
| else | |
| renovate $RENOVATE_EXTRA_FLAG | |
| fi |