Renovate #2013
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Renovate | |
| on: | |
| schedule: | |
| # Running every hour every working day (Monday to Friday) | |
| - cron: '0 * * * 1-5' | |
| # Running every two hours on weekends (Saturday and Sunday) | |
| - cron: '0 */2 * * 6,0' | |
| # allow to manually trigger this workflow | |
| workflow_dispatch: | |
| inputs: | |
| renovate_log_level_debug: | |
| type: boolean | |
| description: "Rune Renovate With Debug Log Levels" | |
| default: true | |
| jobs: | |
| renovate: | |
| name: Run self-hosted Renovate | |
| runs-on: ubuntu-latest | |
| steps: | |
| # we need special permission to be able to operate renovate (view, list, | |
| # create issues, PR, etc.) and we use a GitHub application with fine | |
| # grained permissions installed in the repository for that. | |
| - name: Get token | |
| id: get_token | |
| uses: cilium/actions-app-token@61a6271ce92ba02f49bf81c755685d59fb25a59a # v0.21.1 | |
| with: | |
| APP_PEM: ${{ secrets.CILIUM_RENOVATE_PEM }} | |
| APP_ID: ${{ secrets.CILIUM_RENOVATE_APP_ID }} | |
| # renovate clones the repository again in its container fs but it needs | |
| # the renovate configuration to start. | |
| - name: Checkout | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: Self-hosted Renovate | |
| uses: renovatebot/github-action@28bcd5c4900a4353b5c9af9e1bd61dd6377f0f0d # v40.3.5 | |
| env: | |
| # default to DEBUG log level, this is always useful | |
| LOG_LEVEL: ${{ github.event.inputs.renovate_log_level_debug == 'false' && 'INFO' || 'DEBUG' }} | |
| with: | |
| # renovate: datasource=github-releases depName=renovatebot/renovate | |
| renovate-version: 38.142.6 | |
| docker-user: root | |
| docker-cmd-file: .github/actions/renovate/entrypoint.sh | |
| configurationFile: .github/renovate.json5 | |
| token: '${{ steps.get_token.outputs.app_token }}' | |
| mount-docker-socket: true |