Renovate #2576
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Renovate | |
on: | |
# For manual dispatch | |
workflow_dispatch: | |
inputs: | |
dryRun: | |
description: Dry-Run | |
default: "false" | |
required: false | |
logLevel: | |
description: Log-Level | |
default: debug | |
required: false | |
# For auto-merge - should exclude non-renovate branch dispatches in job definitions below | |
workflow_run: | |
workflows: | |
- Validate | |
types: | |
- completed | |
# For auto-merge and rebasing | |
push: | |
branches: ["master"] | |
schedule: | |
# Hour 0, 6, 12, 18 in JST(+9) | |
# which translates to hour 9, 15, 21, 27(3) in UTC(+0) | |
- cron: "0 3,9,15,21 * * *" | |
# Limit renovate from executing concurrently | |
concurrency: | |
group: renovate | |
cancel-in-progress: false | |
env: | |
LOG_LEVEL: debug | |
RENOVATE_DRY_RUN: false | |
RENOVATE_CONFIG_FILE: .github/renovate-bot.js | |
jobs: | |
renovate: | |
name: Renovate | |
runs-on: ubuntu-latest | |
# Exclude dispatch from non-renovate checks | |
if: ${{ !(github.event_name == 'workflow_run' && !startsWith(github.event.workflow_run.head_branch, 'renovate/')) }} | |
steps: | |
- name: Generate Token | |
uses: tibdex/github-app-token@v2 | |
id: generate-token | |
with: | |
app_id: "${{ secrets.BOT_APP_ID }}" | |
private_key: "${{ secrets.BOT_APP_PRIVATE_KEY }}" | |
- uses: actions/checkout@v4 | |
- name: Override default config from dispatch variables | |
shell: bash | |
run: | | |
echo "RENOVATE_DRY_RUN=${{ github.event.inputs.dryRun || env.RENOVATE_DRY_RUN }}" >> "${GITHUB_ENV}" | |
echo "LOG_LEVEL=${{ github.event.inputs.logLevel || env.LOG_LEVEL }}" >> "${GITHUB_ENV}" | |
- name: Renovate | |
uses: renovatebot/[email protected] | |
with: | |
renovate-image: "ghcr.io/renovatebot/renovate" | |
renovate-version: "latest" | |
configurationFile: "${{ env.RENOVATE_CONFIG_FILE }}" | |
token: "${{ steps.generate-token.outputs.token }}" | |
env: | |
# Envs prefixed with "RENOVATE_" are passed to renovate container | |
RENOVATE_DOCKER_TOKEN: "${{ secrets.RENOVATE_DOCKER_TOKEN }}" |