renovate.yml

name: Renovate
on:
  schedule:
    - cron: '0 1,3,6,9,13,22,23 * * *'
  workflow_dispatch:

jobs:
  renovate:
    runs-on: ubuntu-latest
    timeout-minutes: 30
    steps:
      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Setup node
        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0

      - name: Renovate
        uses: renovatebot/github-action@531c6786d6cf05ef148c4cfe251745c2c6de442c # v41.0.9
        with:
          renovate-image: ghcr.io/nabeken/renovate-github-apps
          configurationFile: .github/renovate-global.json
          env-regex: "^(?:RENOVATE_\\w+|LOG_LEVEL|GITHUB_PRIV_KEY|GO_GITHUB_APPS_\\w+)$"
        env:
          # let the custom image unset RENOVATE_TOKEN
          RENOVATE_TOKEN: _ACTION_DUMMY_
          GO_GITHUB_APPS_INST_ID: ${{ secrets.renovate_app_inst_id }}
          GO_GITHUB_APPS_APP_ID: ${{ secrets.renovate_app_id }}
          GITHUB_PRIV_KEY: ${{ secrets.renovate_app_priv_key }}