renovate-config/.forgejo/workflows/renovate.yaml

on:
  schedule:
    - cron: '*/30 * * * *'
  push:
    branches: ["main"]
    paths: [".forgejo/workflows/renovate.yaml"]
  # workflow_dispatch:
  #   inputs:
  #     dryRun:
  #       description: Dry Run
  #       default: "false"
  #       required: false
# env:
#   RENOVATE_DRY_RUN: "${{ inputs.dryRun == true }}"
jobs:
  renovate:
    name: Renovate
    runs-on: docker
    container:
      image: ghcr.io/renovatebot/renovate:38.10.0@sha256:59ed49ef5ece0cee244450ef18f2d9f9969a11db9a845d25289fd911e2a37a52
    steps:
      - name: Checkout
        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
        with:
          show-progress: false
      - name: setup .ssh directory
        run: mkdir -p /home/ubuntu/.ssh && chmod 700 /home/ubuntu/.ssh
      - name: Write ssh key
        id: sshkey
        # uses: https://github.com/timheuer/base64-to-file@adaa40c0c581f276132199d4cf60afa07ce60eac # v1
        uses: timheuer/base64-to-file@adaa40c0c581f276132199d4cf60afa07ce60eac # v1
        with:
          encodedString: "${{ secrets.SSH_USER }}"
          fileName: id_ed25519
          fileDir: /home/ubuntu/.ssh
      - name: chmod id_ed25519
        run: chmod 600 /home/ubuntu/.ssh/id_ed25519
      - name: Renovate
        uses: ./.forgejo/actions/renovate
        with:
          endpoint: https://git.hsn.dev/api/v1/
          token: ${{ secrets.RENOVATE_TOKEN }}
          github-token: ${{ secrets.GH_TOKEN }}
          args: --platform gitea --autodiscover
          save-cache: true