Skip to content

Schedule - Renovate #7425

Schedule - Renovate

Schedule - Renovate #7425

---
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: Schedule - Renovate
on:
workflow_dispatch:
inputs:
dryRun:
description: Dry-Run
default: false
required: false
type: boolean
logLevel:
description: Log-Level
default: debug
required: false
schedule:
- cron: "0 * * * *"
push:
branches:
- main
paths:
- .github/renovate.json5
- .github/renovate/**.json5
- .github/workflows/schedule-renovate.yaml
env:
LOG_LEVEL: debug
RENOVATE_DRY_RUN: false
RENOVATE_CONFIG_FILE: .github/renovate-bot.json5
jobs:
renovate:
name: Renovate
runs-on: ubuntu-latest
steps:
# # https://github.com/marketplace/actions/github-app-token
# - name: Harden Runner
# uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
# with:
# egress-policy: audit
# https://github.com/marketplace/actions/create-github-app-token
- name: Generate Token
uses: actions/create-github-app-token@78e5f2ddc08efcb88fbbee6cfa3fed770ba550c3 # v1.9.1
id: app-token
with:
app-id: "${{ secrets.BOT_APP_ID }}"
private-key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"
# https://github.com/marketplace/actions/checkout
- name: Checkout Repository
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with:
token: "${{ steps.app-token.outputs.token }}"
- name: Override default config from dispatch variables
run: |
echo "RENOVATE_DRY_RUN=${{ github.event.inputs.dryRun || env.RENOVATE_DRY_RUN }}" >> "${GITHUB_ENV}"
echo "LOG_LEVEL=${{ github.event.inputs.logLevel || env.LOG_LEVEL }}" >> "${GITHUB_ENV}"
# https://github.com/marketplace/actions/renovate-bot-github-action
- name: Renovate
uses: renovatebot/github-action@23b01dbf6f38965076a36aff87f802263164f204 # v40.1.6
with:
configurationFile: "${{ env.RENOVATE_CONFIG_FILE }}"
token: "${{ steps.app-token.outputs.token }}"