renovate.yaml

---
  name: Renovate

  on:
    workflow_dispatch:
      inputs:
        dryRun:
          description: Dry-Run
          default: "false"
          required: false
        logLevel:
          description: Log-Level
          default: debug
          required: false
        version:
          description: Renovate version
          default: latest
          required: false
    schedule:
      - cron: "0 * * * *"
    push:
      branches: ["main"]
      paths:
        - .github/renovate.json5
        - .github/renovate/**.json5

  concurrency:
    group: ${{ github.workflow }}-${{ github.event.number || github.ref }}
    cancel-in-progress: true

  env:
    WORKFLOW_DRY_RUN: false
    WORKFLOW_LOG_LEVEL: debug
    WORKFLOW_VERSION: latest
    RENOVATE_AUTODISCOVER: true
    RENOVATE_AUTODISCOVER_FILTER: "${{ github.repository }}"
    RENOVATE_GIT_AUTHOR: "${{ secrets.BOT_USERNAME }} <${{ secrets.BOT_USER_ID }}+${{ secrets.BOT_USERNAME }}[bot]@users.noreply.github.com>"
    RENOVATE_ONBOARDING_CONFIG_FILE_NAME: .github/renovate.json5
    RENOVATE_PLATFORM: github
    RENOVATE_PLATFORM_COMMIT: true
    RENOVATE_USERNAME: "${{ secrets.BOT_USERNAME }}[bot]"

  jobs:
    renovate:
      name: Renovate
      runs-on: ubuntu-latest
      steps:
        - name: Generate Token
          uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0
          id: app-token
          with:
            app-id: "${{ secrets.BOT_APP_ID }}"
            private-key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"

        - name: Checkout
          uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
          with:
            token: "${{ steps.app-token.outputs.token }}"

        - name: Override Default Config
          shell: bash
          run: |
            echo "RENOVATE_DRY_RUN=${{ github.event.inputs.dryRun || env.WORKFLOW_DRY_RUN }}" >> "${GITHUB_ENV}"
            echo "LOG_LEVEL=${{ github.event.inputs.logLevel || env.WORKFLOW_LOG_LEVEL }}" >> "${GITHUB_ENV}"

        - name: Renovate
          uses: renovatebot/github-action@67a664fc9b4481b33a3eff6ee9edfb7a7b9dfa1e # v41.0.2
          with:
            configurationFile: "${{ env.RENOVATE_ONBOARDING_CONFIG_FILE_NAME }}"
            token: "${{ steps.app-token.outputs.token }}"
            renovate-version: "${{ github.event.inputs.version || env.WORKFLOW_VERSION }}"