Renovate #2319
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Renovate | |
| # Instructions can be found here: | |
| # https://github.com/renovatebot/github-action | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| logLevel: | |
| description: 'Override default log level' | |
| required: false | |
| default: 'info' | |
| type: string | |
| overrideSchedule: | |
| description: 'Override all schedules' | |
| required: false | |
| default: 'false' | |
| type: string | |
| issues: | |
| types: [edited] | |
| pull_request: | |
| types: [edited] | |
| # Run renovate every 4 hours (7, 11, 15, 19, 23, 3 CEST) | |
| schedule: | |
| - cron: '0 1,5,9,13,17,21 * * *' | |
| concurrency: | |
| group: renovate | |
| cancel-in-progress: true | |
| jobs: | |
| renovate: | |
| name: 'Renovate' | |
| runs-on: ubuntu-latest | |
| if: | | |
| github.event_name == 'schedule' || | |
| github.event_name == 'workflow_dispatch' || | |
| (github.event_name == 'issues' && github.event.issue.title == 'Dependency Dashboard') || | |
| (github.event_name == 'pull_request' && github.event.pull_request.user.login == 'dashql-renovate[bot]') | |
| steps: | |
| - name: Get token | |
| id: get_token | |
| uses: tibdex/github-app-token@v2 | |
| with: | |
| private_key: ${{ secrets.RENOVATE_APP_PRIVATE_KEY }} | |
| app_id: ${{ secrets.RENOVATE_APP_ID }} | |
| - uses: actions/checkout@v6 | |
| with: | |
| submodules: 'recursive' | |
| fetch-depth: 0 | |
| - name: Self-hosted Renovate | |
| uses: renovatebot/github-action@68a3ea99af6ad249940b5a9fdf44fc6d7f14378b # v46.1.6 | |
| env: | |
| # Repository taken from variable to keep configuration file generic | |
| RENOVATE_REPOSITORIES: ${{ github.repository }} | |
| # Onboarding not needed for self hosted | |
| RENOVATE_ONBOARDING: 'false' | |
| # Username for GitHub authentication (should match GitHub App name + [bot]) | |
| RENOVATE_USERNAME: 'dashql-renovate[bot]' | |
| # Git commit author used, must match GitHub App | |
| # Get user-id from https://api.github.com/users/dashql-renovate[bot] | |
| RENOVATE_GIT_AUTHOR: 'DashQL Renovate Bot <203421728+dashql-renovate[bot]@users.noreply.github.com>' | |
| # Use GitHub API to create commits (this allows for signed commits from GitHub App) | |
| RENOVATE_PLATFORM_COMMIT: 'true' | |
| # Allow postUpgradeTasks to recompute sha256 hashes in bazel/core_dependencies.bzl | |
| RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS: '["^python3 scripts/update_bazel_hashes\\.py bazel/core_dependencies\\.bzl$","^python3 scripts/update_bazel_hashes\\.py bazel/external_tableauhyperapi\\.bzl$"]' | |
| # Override schedule if set | |
| RENOVATE_FORCE: ${{ github.event.inputs.overrideSchedule == 'true' && '{''schedule'':null}' || '' }} | |
| # Renovate logging | |
| LOG_LEVEL: ${{ inputs.logLevel || 'info' }} | |
| with: | |
| configurationFile: .github/renovate.json | |
| token: '${{ steps.get_token.outputs.token }}' |