renovate-config/.forgejo/workflows/renovate.yaml

on:
  schedule:
    - cron: '*/30 * * * *'
  push:
    branches: ["main"]
    paths: [".forgejo/workflows/renovate.yaml"]
  workflow_dispatch:
    inputs:
      dryRun:
        default: false
        description: Dry Run
        required: false
        type: boolean
env:
  RENOVATE_DRY_RUN: "${{ inputs.dryRun == true }}"
  DOCKER_USERNAME: "${{ secrets.DOCKER_USERNAME }}"
  DOCKER_PASSWORD: "${{ secrets.DOCKER_PASSWORD }}"
jobs:
  renovate:
    name: Renovate
    runs-on: docker-x86_64
    container:
      image: ghcr.io/renovatebot/renovate:39.86.4@sha256:fc155452003746272f04dac0f8af15018f304cb06ea417b80db5fcb3746ff3ed
    steps:
      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          show-progress: false
      - name: setup .ssh directory
        run: mkdir -p /home/ubuntu/.ssh && chmod 700 /home/ubuntu/.ssh
      - name: Write ssh key
        id: sshkey
        uses: https://github.com/timheuer/base64-to-file@adaa40c0c581f276132199d4cf60afa07ce60eac # v1
        # uses: timheuer/base64-to-file@adaa40c0c581f276132199d4cf60afa07ce60eac # v1
        with:
          encodedString: "${{ secrets.SSH_USER }}"
          fileName: id_ed25519
          fileDir: /home/ubuntu/.ssh
      - name: chmod id_ed25519
        run: chmod 600 /home/ubuntu/.ssh/id_ed25519
      - name: Renovate
        uses: ./.forgejo/actions/renovate
        with:
          endpoint: https://git.hsn.dev/api/v1/
          token: ${{ secrets.RENOVATE_TOKEN }}
          github-token: ${{ secrets.GH_TOKEN }}
          args: --platform gitea --autodiscover
          save-cache: true
        env:
          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}