renovate.yaml

---
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: Renovate

on: # yamllint disable-line rule:truthy
  workflow_dispatch:
    inputs:
      dryRun:
        description: 'Dry-Run'
        default: 'false'
        required: false
      logLevel:
        description: 'Log-Level'
        default: 'debug'
        required: false
      version:
        description: Renovate version
        default: latest
        required: false
  schedule:
    - cron: '0 9,22 * * *'
  push:
    branches:
      - main
    paths:
      - '.github/renovate.json5'
      - '.github/renovate/**.json5'

concurrency:
  group: ${{ github.ref }}-${{ github.workflow }}
  cancel-in-progress: true

env:
  LOG_LEVEL: debug
  DRY_RUN: false
  RENOVATE_AUTODISCOVER: true
  RENOVATE_AUTODISCOVER_FILTER: '${{ github.repository }}'
  RENOVATE_DRY_RUN: '${{ inputs.dryRun == true }}'
  RENOVATE_PLATFORM: github
  RENOVATE_PLATFORM_COMMIT: true
  WORKFLOW_RENOVATE_VERSION: "${{ inputs.version || 'latest' }}"

jobs:
  renovate:
    name: Renovate
    runs-on: ubuntu-latest
    steps:
      - name: Generate Token
        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
        id: generate-token
        with:
          app_id: '${{ secrets.BOT_APP_ID }}'
          private_key: '${{ secrets.BOT_APP_PRIVATE_KEY }}'

      - name: Checkout
        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
        with:
          token: '${{ steps.generate-token.outputs.token }}'

      - name: Override default config from dispatch variables
        run: |
          echo "DRY_RUN=${{ github.event.inputs.dryRun || env.DRY_RUN }}" >> "${GITHUB_ENV}"
          echo "LOG_LEVEL=${{ github.event.inputs.logLevel || env.LOG_LEVEL }}" >> "${GITHUB_ENV}"

      - name: Renovate
        uses: renovatebot/github-action@a1ed1d0adddfdf138192d1fbe3150a80094dee6a # v40.3.1
        with:
          configurationFile: .github/renovate.json5
          token: '${{ steps.generate-token.outputs.token }}'
          renovate-version: '${{ env.WORKFLOW_RENOVATE_VERSION }}'