Topic/renovatebot

[ohdearaugustin]

• read the CONTRIBUTING guidelines
• raised a GitHub issue or discussed it on the projects chat beforehand
• [] added unit tests
• [] added integration tests
• [] updated documentation if needed
• [] updated CHANGELOG.md

This will implement #323.
To make the renovatebot work, we would need to create a github app. (I decided to implement it with an app, as the permissions can be set more specifically)

In the developer setting create a new app.

1. Set GitHub App name (eg.renovatebot-headscale, or something like that)
2. Set Homepage URL to https://github.com/juanfont/headscale
3. Set permissions:

• Administration Read-only
• Contents Read & write
• Issues Read & write
• Metadata Read-only
• Pull requests Read & write
• Workflows Read & write
• Everything else leave on No access

4. Install App "Only select repositories" --> juanfont/headscale
5. Generate Private Key (this will let you download a zip with a cert inside)
6. Add to the Secrets Actions of the repository two new secrets
7. RENOVATEBOT_APP_ID with the content App ID
8. RENOVATEBOT_SECRET with the private key encoded in base64 (cat .<CURRENT_DATE>.private-key.pem | base64 -w 0 && echo
9. Merge PR

After the setup of renovatebot it run it manually for the first time. This will result in some PRs to update some github actions. After that the renovatebot will look automatically on the 5th and 20th of each month for updates. Otherwise it will spam a lot of PRs for update. This can be reconfigured if needed.

[kradalby]

Can we make it also update the go version in github actions?

[ohdearaugustin]

The regexManagers will update the go-verisons of the github actions, see line 26.

[kradalby]

I'll approve this, but @juanfont has to do the steps

[juanfont]

Great work!