Skip to content

Renovate

Renovate #1788

Workflow file for this run

name: Renovate
on:
schedule:
- cron: "0 * * * *" # hourly
workflow_dispatch:
inputs:
dry_run:
description: "Dry-run (no PRs opened)"
required: false
default: "false"
concurrency:
group: renovate
cancel-in-progress: false
permissions:
contents: write
pull-requests: write
issues: write
jobs:
renovate:
name: Renovate
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Run Renovate
uses: renovatebot/github-action@693b9ef15eec82123529a37c782242f091365961 # v46.1.14
env:
LOG_LEVEL: debug
RENOVATE_DRY_RUN: ${{ github.event.inputs.dry_run == 'true' && 'full' || '' }}
RENOVATE_REPOSITORIES: ${{ github.repository }}
RENOVATE_BASE_BRANCHES: ${{ github.ref_name }}
# Allow-list for postUpgradeTasks (renovate.json). Only the Scalar
# SRI refresh is permitted: the @scalar/api-reference bump must
# rewrite the SRI hash in the same commit or the /api docs page
# ships a browser-blocked script tag.
RENOVATE_ALLOWED_COMMANDS: '["bash scripts/update-scalar-sri.sh"]'
with:
token: ${{ secrets.GITHUB_TOKEN }}