name: Renovate

# RECOMMENDATIONS #2: automated dependency-update PRs (NuGet, npm, Dockerfiles, Actions)
# that ride the existing required CI gates. Runs weekly + on demand.
#
# ONE-TIME SETUP (manual): create a Gitea personal access token with scopes
# repo (rw) + user (r) + issue (rw) + organization (r), and add it as the Actions
# secret RENOVATE_TOKEN (repo Settings -> Actions -> Secrets). Without the secret this
# workflow fails fast with a clear message. See https://docs.renovatebot.com/modules/platform/gitea/
on:
  schedule:
    - cron: '30 4 * * 1'      # Mondays 04:30 UTC
  workflow_dispatch: {}

jobs:
  renovate:
    runs-on: ubuntu-latest
    steps:
      - name: Require RENOVATE_TOKEN
        run: |
          if [ -z "${{ secrets.RENOVATE_TOKEN }}" ]; then
            echo "RENOVATE_TOKEN secret is not set — see the comment at the top of this workflow." >&2
            exit 1
          fi
      - name: Run Renovate
        uses: https://github.com/renovatebot/github-action@v40.3.6
        with:
          token: ${{ secrets.RENOVATE_TOKEN }}
        env:
          RENOVATE_PLATFORM: gitea
          RENOVATE_ENDPOINT: https://git.cesnimda.uk/api/v1
          RENOVATE_REPOSITORIES: cesnimda/Inboxintel
          RENOVATE_ONBOARDING: "false"
          RENOVATE_REQUIRE_CONFIG: optional
          LOG_LEVEL: info