ci: renovate workflow and config update

.github/renovate.json

@@ -0,0 +1,29 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "extends": ["config:best-practices"],
+    "repositories": ["karelvanhecke/libvirt-operator"],
+    "requireConfig": "ignored",
+    "onboarding": false,
+    "platformCommit": "enabled",
+    "postUpdateOptions": [
+        "gomodTidy"
+    ],
+    "customManagers":[
+        {
+            "customType": "regex",
+            "fileMatch": "^\\.github/workflows/(?:ci|renovate)\\.yaml$",
+            "depNameTemplate": "ghcr.io/renovatebot/renovate",
+            "datasourceTemplate": "docker",
+            "matchStrings": [
+                "(?:renovate|RENOVATE)[_-](?:version|VERSION): (?<currentValue>[0-9.]+)(?<currentDigest>@sha256:[a-f0-9]+)?"
+            ]
+        }
+    ],
+    "packageRules": [
+        {
+            "matchDepNames": "ghcr.io/renovatebot/renovate",
+            "matchUpdateTypes": ["minor","patch"],
+            "automerge": true
+        }
+    ]
+}

.github/workflows/ci.yaml

@@ -27,6 +27,8 @@ jobs:
               - '**/*.go'
             manifests:
               - 'install/base/**/*.yaml'
+            renovate:
+              - .github/renovate.json
 
   golangci-lint:
     name: golangci-lint
@@ -110,3 +112,20 @@ jobs:
 
       - name: Deploy to kind cluster
         run: make deploy-to-kind-cluster
+
+  renovate-validate:
+    name: Validate Renovate config
+    runs-on: ubuntu-latest
+    needs: changes
+    if: needs.changes.outputs.renovate == 'true'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Validate config
+        env:
+          RENOVATE_VERSION: 39.7.3
+        run: >
+          docker run --rm -v ./.github/renovate.json:/renovate.json
+          --entrypoint renovate-config-validator
+          ghcr.io/renovatebot/renovate:${RENOVATE_VERSION} /renovate.json

.github/workflows/renovate.yaml

@@ -23,6 +23,6 @@ jobs:
       - name: Run Renovate
         uses: renovatebot/github-action@28bcd5c4900a4353b5c9af9e1bd61dd6377f0f0d # v40.3.5
         with:
+          configurationFile: .github/renovate.json
+          renovate-version: 39.7.3
           token: '${{ steps.app-token.outputs.token }}'
-        env:
-          RENOVATE_REPOSITORIES: ${{ github.repository }}