Renovate #57085
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Renovate | |
| on: | |
| pull_request: | |
| branches: [ main ] | |
| paths-ignore: | |
| - '**.md' | |
| - 'renovate.json' | |
| push: | |
| branches: [ main ] | |
| paths-ignore: | |
| - '**.md' | |
| - 'renovate.json' | |
| workflow_dispatch: | |
| inputs: | |
| logLevel: | |
| description: | | |
| Renovate log levels are used to control the amount of detail that is output in the Renovate log files. | |
| Log levels range: trace, debug, info, warn, error, fatal. | |
| required: true | |
| default: 'warn' | |
| options: | |
| - trace | |
| - debug | |
| - info | |
| - warn | |
| - error | |
| - fatal | |
| dryRun: | |
| description: | | |
| Use dryRun to preview the behavior of Renovate in logs, without making any changes to the repository files. | |
| You can choose from the following behaviors for the dryRun config option: | |
| null: Default behavior (except on pull requests) - Performs a regular Renovate run including creating/updating/deleting branches and PRs | |
| "extract": Performs a very quick package file scan to identify the extracted dependencies | |
| "lookup": Performs a package file scan to identify the extracted dependencies and updates available | |
| "full": Default behaviour on pull requests. Performs a dry run by logging messages instead of creating/updating/deleting branches and PRs | |
| Information provided mainly in debug log level. | |
| required: false | |
| options: | |
| - extract | |
| - lookup | |
| - full | |
| schedule: | |
| # The "*" (#42, asterisk) character has special semantics in YAML, so this | |
| # string has to be quoted. | |
| - cron: '*/15 * * * *' | |
| jobs: | |
| renovate: | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: Request a Github token | |
| id: action-github-app-token | |
| uses: getsentry/action-github-app-token@v3.0.0 | |
| with: | |
| app_id: ${{ secrets.APP_ID }} | |
| private_key: ${{ secrets.PRIVATE_KEY }} | |
| - id: renovate-setup | |
| run: | | |
| if [ "$GITHUB_EVENT_NAME" == "pull_request" ]; then | |
| echo "DRY_RUN=full" >> $GITHUB_OUTPUT | |
| else | |
| echo "DRY_RUN=${{ inputs.dryRun }}" >> $GITHUB_OUTPUT | |
| fi | |
| - name: Self-hosted Renovate | |
| uses: renovatebot/github-action@0984fb80fc633b17e57f3e8b6c007fe0dc3e0d62 # v40.3.6 | |
| with: | |
| configurationFile: renovate-config.js | |
| token: ${{ steps.action-github-app-token.outputs.token }} | |
| env: | |
| LOG_LEVEL: ${{ inputs.logLevel || 'warn' }} | |
| RENOVATE_AUTODISCOVER: true | |
| RENOVATE_DRY_RUN: ${{ steps.renovate-setup.outputs.DRY_RUN }} |