add renovatebot to run hourly in a self-hosted github action instead …

…of using dependabot

Signed-off-by: jessebot <[email protected]>

.github/renovate-config.json

@@ -0,0 +1,10 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "onboarding": false,
+    "username": "renovate-release",
+    "gitAuthor": "Renovate Bot <[email protected]>",
+    "platform": "github",
+    "repositories": [
+        "nextcloud/helm"
+    ]
+}

.github/workflows/renovate.yml

@@ -0,0 +1,32 @@
+name: Renovate
+on:
+  schedule:
+    # run hourly
+    - cron: '0 * * * *'
+  push:
+    branches:
+      - main
+    paths:
+      - ".github/renovate-config.json"
+      - ".github/workflows/renovate.yml"
+      - "renovate.json"
+      - "scripts/**"
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get token
+        id: get_token
+        uses: tibdex/[email protected]
+        with:
+          private_key: ${{ secrets.PRIVATE_KEY }}
+          app_id: ${{ secrets.APP_ID }}
+
+      - name: Checkout
+        uses: actions/[email protected]
+
+      - name: Self-hosted Renovate
+        uses: renovatebot/[email protected]
+        with:
+          token: '${{ steps.get_token.outputs.token }}'
+          configurationFile: .github/renovate-config.json

charts/nextcloud/Chart.yaml

@@ -1,6 +1,7 @@
 apiVersion: v2
 name: nextcloud
 version: 4.6.8
+# renovate: image=nextcloud
 appVersion: 29.0.0
 description: A file sharing server that puts the control and security of your own data back into your hands.
 keywords:

renovate.json

@@ -0,0 +1,50 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "customManagers": [
+        {
+          "customType": "regex",
+          "datasourceTemplate": "docker",
+          "fileMatch": [
+            "(^|/)Chart\\.yaml$"
+          ],
+          "matchStrings": [
+            "#\\s*renovate: image=(?<depName>.*?)\\s+appVersion:\\s*[\"']?(?<currentValue>[\\w+\\.\\-]*)"
+          ]
+        }
+    ],
+    "packageRules": [
+      {
+        "description": "Fix subchart archives for helm chart",
+        "matchManagers": ["helmv3"],
+        "postUpdateOptions": ["helmUpdateSubChartArchives"]
+      },
+      {
+        "description": "Fix version in Chart.yaml after helmv3 dep patch updates",
+        "matchManagers": ["helmv3"],
+        "matchUpdateTypes": ["patch"],
+        "bumpVersion": "patch"
+      },
+      {
+        "description": "Fix version in Chart.yaml after helmv3 dep minor updates",
+        "matchManagers": ["helmv3"],
+        "matchUpdateTypes": ["minor"],
+        "bumpVersion": "minor"
+      },
+      {
+        "description": "Fix version in Chart.yaml after helmv3 dep major updates",
+        "matchManagers": ["helmv3"],
+        "matchUpdateTypes": ["major"],
+        "bumpVersion": "major"
+      },
+      {
+        "description": "Bump helm chart versions by a patch when updating values files. Digests, pins, rollbacks, replacements and pinDigest updates are deliberately ignored since in our use case, these need a manual decision about the version bump for the chart. This can be removed when https://github.com/renovatebot/renovate/issues/8231 is implemented and enabled.",
+        "matchManagers": ["helm-values", "regex"],
+        "postUpgradeTasks": {
+          "commands": [
+            "bash scripts/bump-chart-version.sh '{{{updateType}}}'"
+          ],
+          "fileFilters": ["**/Chart.yaml"]
+        }
+      }
+    ]
+}

scripts/bump-chart-version.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+parent_dir="$1"
+update_type="$2"
+
+version=$(grep "^version:" "charts/${parent_dir}/Chart.yaml" | awk '{print $2}')
+if [[ ! $version ]]; then
+  echo "No valid version was found"
+  exit 1
+fi
+
+major=$(echo "$version" | cut -d. -f1)
+minor=$(echo "$version" | cut -d. -f2)
+patch=$(echo "$version" | cut -d. -f3)
+
+if [[ "$update_type" =~ (major|replacement) ]]; then
+  major=$(( major + 1 ))
+  minor=0
+  patch=0
+elif [[ "$update_type" =~ 'minor' ]]; then
+  minor=$(( minor + 1 ))
+  patch=0
+else
+  patch=$(( patch + 1 ))
+fi
+
+echo "Bumping version for $parent_dir from $version to $major.$minor.$patch"
+sed -i "s/^version:.*/version: ${major}.${minor}.${patch}/g" "charts/${parent_dir}/Chart.yaml"