From 7c4ce20f80338048eec1cbe406c1b8b3dc41cce2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Tue, 7 Oct 2025 21:34:42 +0200 Subject: [PATCH 1/3] Add Renovate configuration files for dependency management --- .github/workflows/renovate.yml | 29 +++++++++++++++++++++++++++++ renovate.json | 3 +++ 2 files changed, 32 insertions(+) create mode 100644 .github/workflows/renovate.yml create mode 100644 renovate.json diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml new file mode 100644 index 00000000..30b53cf3 --- /dev/null +++ b/.github/workflows/renovate.yml @@ -0,0 +1,29 @@ +name: "Renovate" +on: + workflow_dispatch: + inputs: + debug: + description: "Enable debug logging" + type: boolean + required: false + default: false + schedule: + - cron: "0 0 * * 1" # Triggers the workflow every Monday at midnight +jobs: + renovate: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v5.0.0 + - name: Self-hosted Renovate + uses: renovatebot/github-action@v43.0.15 + with: + token: ${{ secrets.RENOVATE_TOKEN }} + env: + LOG_LEVEL: ${{ inputs.DEBUG == 'true' && 'debug' || 'info' }} + RENOVATE_REPOSITORIES: "['${{ github.repository }}']" + RENOVATE_COMMIT_MESSAGE_SUFFIX: '{{#unless groupName}}{{#if (equals updateType "digest")}}(from {{currentDigestShort}}){{else}}(from {{currentVersion}}){{/if}}{{/unless}}' + RENOVATE_LABELS: "['dependencies']" + RENOVATE_DEPENDENCY_DASHBOARD_LABELS: "['dependencies']" + RENOVATE_EXTENDS: '["config:best-practices","mergeConfidence:all-badges",":pinVersions","security:openssf-scorecard",":prHourlyLimitNone",":separateMultipleMajorReleases",":configMigration"]' + RENOVATE_PLATFORM: "github" diff --git a/renovate.json b/renovate.json new file mode 100644 index 00000000..7190a60b --- /dev/null +++ b/renovate.json @@ -0,0 +1,3 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json" +} From e0afd8d8c1a069c0d541d6d4ffeb4195933f4e55 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Wed, 8 Oct 2025 08:49:00 +0200 Subject: [PATCH 2/3] Fix casing for DEBUG input and update LOG_LEVEL condition in Renovate workflow --- .github/workflows/renovate.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index 30b53cf3..34350d36 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -2,7 +2,7 @@ name: "Renovate" on: workflow_dispatch: inputs: - debug: + DEBUG: description: "Enable debug logging" type: boolean required: false @@ -20,7 +20,7 @@ jobs: with: token: ${{ secrets.RENOVATE_TOKEN }} env: - LOG_LEVEL: ${{ inputs.DEBUG == 'true' && 'debug' || 'info' }} + LOG_LEVEL: ${{ inputs.DEBUG && 'debug' || 'info' }} RENOVATE_REPOSITORIES: "['${{ github.repository }}']" RENOVATE_COMMIT_MESSAGE_SUFFIX: '{{#unless groupName}}{{#if (equals updateType "digest")}}(from {{currentDigestShort}}){{else}}(from {{currentVersion}}){{/if}}{{/unless}}' RENOVATE_LABELS: "['dependencies']" From 8a52497e9eb203e46f3d757f2f5a641fed27780f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erwan=20Herv=C3=A9?= Date: Wed, 8 Oct 2025 08:53:42 +0200 Subject: [PATCH 3/3] Fix formatting of RENOVATE_REPOSITORIES and labels in Renovate workflow --- .github/workflows/renovate.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index 34350d36..2c8e6470 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -21,9 +21,9 @@ jobs: token: ${{ secrets.RENOVATE_TOKEN }} env: LOG_LEVEL: ${{ inputs.DEBUG && 'debug' || 'info' }} - RENOVATE_REPOSITORIES: "['${{ github.repository }}']" + RENOVATE_REPOSITORIES: '["${{ github.repository }}"]' RENOVATE_COMMIT_MESSAGE_SUFFIX: '{{#unless groupName}}{{#if (equals updateType "digest")}}(from {{currentDigestShort}}){{else}}(from {{currentVersion}}){{/if}}{{/unless}}' - RENOVATE_LABELS: "['dependencies']" - RENOVATE_DEPENDENCY_DASHBOARD_LABELS: "['dependencies']" + RENOVATE_LABELS: '["dependencies"]' + RENOVATE_DEPENDENCY_DASHBOARD_LABELS: '["dependencies"]' RENOVATE_EXTENDS: '["config:best-practices","mergeConfidence:all-badges",":pinVersions","security:openssf-scorecard",":prHourlyLimitNone",":separateMultipleMajorReleases",":configMigration"]' RENOVATE_PLATFORM: "github"