This repository has been archived by the owner on Mar 8, 2024. It is now read-only.
Renovate #26
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
--- | |
name: Renovate | |
on: | |
workflow_dispatch: | |
env: | |
LOG_LEVEL: debug | |
# renovate: datasource=docker depName=renovate packageName=ghcr.io/renovatebot/renovate | |
RENOVATE_VERSION: 37.227.0 | |
jobs: | |
test: | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 | |
# https://github.com/marketplace/actions/github-app-token | |
- uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0 | |
id: app_token | |
with: | |
app_id: ${{ vars.APP_ID }} | |
installation_retrieval_mode: id | |
installation_retrieval_payload: ${{ vars.INSTALLATION_ID }} | |
private_key: ${{ secrets.GH_APP_PRIVATE_KEY }} | |
permissions: >- | |
{ | |
"contents": "read", | |
"metadata": "read" | |
} | |
# https://github.com/actions/checkout | |
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 | |
with: | |
repository: belodetek/minimal-reproduction | |
token: ${{ steps.app_token.outputs.token }} | |
submodules: recursive | |
path: test | |
- run: | | |
set -x | |
cat <test/private-submodule/README.md | |
renovate: | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 | |
- uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0 | |
id: app_token | |
with: | |
app_id: ${{ vars.APP_ID }} | |
installation_retrieval_mode: id | |
installation_retrieval_payload: ${{ vars.INSTALLATION_ID }} | |
private_key: ${{ secrets.GH_APP_PRIVATE_KEY }} | |
permissions: >- | |
{ | |
"contents": "read", | |
"metadata": "read", | |
"pull_requests": "read" | |
} | |
# https://github.com/renovatebot | |
- uses: renovatebot/github-action@2d90417499f45ff78a09586f7b9874b19817dba3 # v40.1.0 | |
with: | |
# https://docs.renovatebot.com/self-hosted-configuration | |
configurationFile: default.json | |
token: ${{ steps.app_token.outputs.token }} | |
renovate-version: ${{ env.RENOVATE_VERSION }} | |
# https://github.com/renovatebot/github-action?tab=readme-ov-file#passing-other-environment-variables | |
env-regex: "^(?:RENOVATE_\\w+|DEBUG|LOG_LEVEL|GH_TOKEN|GITHUB_TOKEN|GIT_TRACE|GIT_TRACE_SETUP|GIT_CURL_VERBOSE)$" | |
env: | |
# https://github.com/steveukx/git-js/blob/main/docs/DEBUG-LOGGING-GUIDE.md | |
DEBUG: simple-git,simple-git:* | |
# https://git-scm.com/book/en/v2/Git-Internals-Environment-Variables | |
GIT_TRACE: 1 | |
GIT_TRACE_SETUP: 1 | |
GIT_CURL_VERBOSE: 1 | |
GH_TOKEN: ${{ steps.app_token.outputs.token }} | |
GITHUB_TOKEN: ${{ steps.app_token.outputs.token }} | |
RENOVATE_TOKEN: ${{ steps.app_token.outputs.token }} | |
RENOVATE_DRY_RUN: full | |
RENOVATE_HOST_RULES: | | |
[ | |
{ | |
"hostType": "github", | |
"matchHost": "github.com", | |
"token": "${{ steps.app_token.outputs.token }}" | |
}, | |
{ | |
"hostType": "github", | |
"matchHost": "api.github.com", | |
"token": "${{ steps.app_token.outputs.token }}" | |
}, | |
{ | |
"hostType": "git-refs", | |
"matchHost": "api.github.com", | |
"token": "${{ steps.app_token.outputs.token }}" | |
}, | |
{ | |
"hostType": "git-tags", | |
"matchHost": "api.github.com", | |
"token": "${{ steps.app_token.outputs.token }}" | |
} | |
] |