Renovate #112

	name: Renovate
	on:
	schedule:
	# The "*" (#42, asterisk) character has special semantics in YAML, so this
	# string has to be quoted.
	- cron: '0 0 * * 0'
	workflow_dispatch:

	defaults:
	run:
	shell: bash

	permissions:
	contents: read

	jobs:
	renovate:
	runs-on: [ self-hosted, Linux, medium, ephemeral ]
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
	with:
	egress-policy: audit

	- name: Checkout Code
	uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
	with:
	submodules: recursive

	- name: Self-hosted Renovate
	uses: renovatebot/github-action@21d88b0bf0183abcee15f990011cca090dfc47dd # v40.1.12
	with:
	configurationFile: .github/renovate.json
	token: ${{ secrets.RENOVATE_TOKEN }}

Provide feedback