fix(renovate): allowedUnsafeExecutions for gradleWrapper as ENV + security-events read permission

Superkooka · Superkooka · commit 1607265786fb · 2026-03-20T15:29:18.000+01:00
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
@@ -9,6 +9,7 @@ permissions:
   contents: write
   pull-requests: write
   issues: write
+  security-events: read
 
 jobs:
   renovate:
@@ -20,4 +21,5 @@ jobs:
         env:
           RENOVATE_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           RENOVATE_REPOSITORIES: ${{ github.repository }}
+          RENOVATE_ALLOWED_UNSAFE_EXECUTIONS: "gradleWrapper"
  
diff --git a/renovate.json b/renovate.json
@@ -6,7 +6,6 @@
   "labels": ["dependencies"],
   "dependencyDashboard": true,
   "dependencyDashboardTitle": "Renovate Dashboard",
-  "allowedUnsafeExecutions": ["gradleWrapper"],
 
   "regexManagers": [
     {

Original file line number	Diff line number	Diff line change
`@@ -6,7 +6,6 @@`
`6`	`6`	`"labels": ["dependencies"],`
`7`	`7`	`"dependencyDashboard": true,`
`8`	`8`	`"dependencyDashboardTitle": "Renovate Dashboard",`
`9`		`- "allowedUnsafeExecutions": ["gradleWrapper"],`
`10`	`9`
`11`	`10`	`"regexManagers": [`
`12`	`11`	`{`