cesnimda
86ecf03963
CI / backend (push) Successful in 50s
CI / frontend (push) Successful in 12s
CI / format (push) Successful in 47s
CI / db-tests (push) Successful in 49s
Deploy Staging / deploy (push) Successful in 18s
CI / backend (pull_request) Successful in 53s
CI / frontend (pull_request) Successful in 15s
CI / format (pull_request) Successful in 49s
CI / db-tests (pull_request) Successful in 50s
Security / secrets (push) Successful in 3s
Security / dependencies (push) Successful in 52s
Security / secrets (pull_request) Successful in 3s
Security / dependencies (pull_request) Successful in 53s
36 lines
1.3 KiB
YAML
36 lines
1.3 KiB
YAML
name: Renovate
|
|
|
|
# RECOMMENDATIONS #2: automated dependency-update PRs (NuGet, npm, Dockerfiles, Actions)
|
|
# that ride the existing required CI gates. Runs weekly + on demand.
|
|
#
|
|
# ONE-TIME SETUP (manual): create a Gitea personal access token with scopes
|
|
# repo (rw) + user (r) + issue (rw) + organization (r), and add it as the Actions
|
|
# secret RENOVATE_TOKEN (repo Settings -> Actions -> Secrets). Without the secret this
|
|
# workflow fails fast with a clear message. See https://docs.renovatebot.com/modules/platform/gitea/
|
|
on:
|
|
schedule:
|
|
- cron: '30 4 * * 1' # Mondays 04:30 UTC
|
|
workflow_dispatch: {}
|
|
|
|
jobs:
|
|
renovate:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Require RENOVATE_TOKEN
|
|
run: |
|
|
if [ -z "${{ secrets.RENOVATE_TOKEN }}" ]; then
|
|
echo "RENOVATE_TOKEN secret is not set — see the comment at the top of this workflow." >&2
|
|
exit 1
|
|
fi
|
|
- name: Run Renovate
|
|
uses: https://github.com/renovatebot/github-action@v40.3.6
|
|
with:
|
|
token: ${{ secrets.RENOVATE_TOKEN }}
|
|
env:
|
|
RENOVATE_PLATFORM: gitea
|
|
RENOVATE_ENDPOINT: https://git.cesnimda.uk/api/v1
|
|
RENOVATE_REPOSITORIES: cesnimda/Inboxintel
|
|
RENOVATE_ONBOARDING: "false"
|
|
RENOVATE_REQUIRE_CONFIG: optional
|
|
LOG_LEVEL: info
|