renovate-config/.forgejo/workflows/renovate.yaml

on:
  schedule:
    - cron: '*/30 * * * *'
  push:
    branches: ["main"]
    paths: [".forgejo/workflows/renovate.yaml"]
  workflow_dispatch:
    inputs:
      dryRun:
        default: false
        description: Dry Run
        required: false
        type: boolean
env:
  RENOVATE_DRY_RUN: "${{ inputs.dryRun == true }}"
jobs:
  renovate:
    name: Renovate
    runs-on: docker-x86_64
    container:
      image: ghcr.io/renovatebot/renovate:39.28.0@sha256:7cf419a3177d4cff065f1fa589c80b603c80fa7c3e1792ef1bcad8267be67325
    steps:
      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          show-progress: false
      - name: setup .ssh directory
        run: mkdir -p /home/ubuntu/.ssh && chmod 700 /home/ubuntu/.ssh
      - name: Write ssh key
        id: sshkey
        uses: https://github.com/timheuer/base64-to-file@adaa40c0c581f276132199d4cf60afa07ce60eac # v1
        # uses: timheuer/base64-to-file@adaa40c0c581f276132199d4cf60afa07ce60eac # v1
        with:
          encodedString: "${{ secrets.SSH_USER }}"
          fileName: id_ed25519
          fileDir: /home/ubuntu/.ssh
      - name: chmod id_ed25519
        run: chmod 600 /home/ubuntu/.ssh/id_ed25519
      - name: Renovate
        uses: ./.forgejo/actions/renovate
        with:
          endpoint: https://git.hsn.dev/api/v1/
          token: ${{ secrets.RENOVATE_TOKEN }}
          github-token: ${{ secrets.GH_TOKEN }}
          args: --platform gitea --autodiscover
          save-cache: true