Renovate #123

	name: Renovate
	on:
	schedule:
	# The "*" (#42, asterisk) character has special semantics in YAML, so this
	# string has to be quoted.
	- cron: '0 0 * * 0'
	workflow_dispatch:

	defaults:
	run:
	shell: bash

	permissions:
	contents: read

	jobs:
	renovate:
	runs-on: [ self-hosted, Linux, medium, ephemeral ]
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
	with:
	egress-policy: audit

	- name: Checkout Code
	uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	with:
	submodules: recursive

	- name: Self-hosted Renovate
	uses: renovatebot/github-action@b266b24b144602ed4f512f0773009d026722f4cc # v40.2.6
	with:
	configurationFile: .github/renovate.json
	token: ${{ secrets.RENOVATE_TOKEN }}

Provide feedback