Renovate #254

	name: Renovate
	on:
	# Allows manual/automated trigger for debugging purposes
	workflow_dispatch:
	inputs:
	logLevel:
	description: "Renovate's log level"
	required: true
	default: "info"
	type: string
	schedule:
	- cron: '0 8 * * *'

	env:
	# Common versions
	EARTHLY_VERSION: '0.8.15'

	LOG_LEVEL: "info"

	jobs:
	renovate:
	runs-on: ubuntu-latest
	if: \|
	!github.event.repository.fork &&
	!github.event.pull_request.head.repo.fork
	steps:
	- name: Checkout
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	# Don't waste time starting Renovate if JSON is invalid
	- name: Validate Renovate JSON
	run: npx --yes --package renovate -- renovate-config-validator

	- name: Get token
	id: get-github-app-token
	uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1
	with:
	app-id: ${{ secrets.RENOVATE_GITHUB_APP_ID }}
	private-key: ${{ secrets.RENOVATE_GITHUB_APP_PRIVATE_KEY }}

	- name: Self-hosted Renovate
	uses: renovatebot/github-action@e3a862510f27d57a380efb11f0b52ad7e8dbf213 # v41.0.6
	env:
	RENOVATE_REPOSITORIES: ${{ github.repository }}
	# Use GitHub API to create commits
	RENOVATE_PLATFORM_COMMIT: "true"
	LOG_LEVEL: ${{ github.event.inputs.logLevel \|\| env.LOG_LEVEL }}
	RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS: '["^earthly .+"]'
	with:
	configurationFile: .github/renovate.json5
	token: '${{ steps.get-github-app-token.outputs.token }}'
	mount-docker-socket: true
	docker-user: root
	docker-cmd-file: .github/renovate-entrypoint.sh

Provide feedback