Renovate #8575
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Renovate | |
| on: | |
| # For manual dispatch | |
| workflow_dispatch: | |
| inputs: | |
| dryRun: | |
| description: Dry-Run | |
| default: "false" | |
| required: false | |
| logLevel: | |
| description: Log-Level | |
| default: debug | |
| required: false | |
| # For auto-merge - should exclude non-renovate branch dispatches in job definitions below | |
| workflow_run: | |
| workflows: | |
| - CI | |
| types: | |
| - completed | |
| schedule: | |
| # 5 a.m. in JST(+9) | |
| - cron: "0 20 * * *" | |
| # For auto-merge and rebasing | |
| push: | |
| branches: ["master"] | |
| permissions: | |
| contents: read | |
| env: | |
| LOG_LEVEL: ${{ github.event.inputs.logLevel || 'debug' }} | |
| RENOVATE_DRY_RUN: ${{ github.event.inputs.dryRun || 'false' }} | |
| RENOVATE_CONFIG_FILE: .github/renovate-bot.json5 | |
| jobs: | |
| renovate: | |
| name: Renovate | |
| runs-on: ubuntu-latest | |
| # Exclude dispatch from non-renovate checks | |
| if: ${{ !(github.event_name == 'workflow_run' && !startsWith(github.event.workflow_run.head_branch, 'renovate/')) }} | |
| steps: | |
| - name: Generate a token | |
| id: generate-token | |
| uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 | |
| with: | |
| app-id: ${{ secrets.RENOVATE_APP_ID }} | |
| private-key: ${{ secrets.RENOVATE_APP_PRIVATE_KEY }} | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| persist-credentials: false | |
| - name: Renovate | |
| uses: renovatebot/github-action@693b9ef15eec82123529a37c782242f091365961 # v46.1.14 | |
| with: | |
| renovate-image: "ghcr.io/renovatebot/renovate" | |
| # renovate:image-tag-digest imageName=ghcr.io/renovatebot/renovate | |
| renovate-version: "43.196.0@sha256:2e5a65fca0b4e829d5bffffdc347cc9c0a8596fddef02738896f915a2ca4ebef" | |
| configurationFile: "${{ env.RENOVATE_CONFIG_FILE }}" | |
| token: "${{ steps.generate-token.outputs.token }}" |