Madison Grubb
d771c4c97f
Prioritize vulnerability fix PRs, pin Renovate via package-lock for reproducible runs, and drop the hourly schedule to every 6 hours.
35 lines
909 B
YAML
35 lines
909 B
YAML
name: Renovate
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
schedule:
|
|
# Every 6 hours is enough once deps are caught up; use workflow_dispatch to run now.
|
|
- cron: "0 */6 * * *"
|
|
|
|
jobs:
|
|
renovate:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: https://git.keligrubb.com/actions/checkout@v7
|
|
|
|
- name: Set up Node.js
|
|
uses: https://git.keligrubb.com/actions/setup-node@v6
|
|
with:
|
|
node-version: "24"
|
|
cache: npm
|
|
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
|
|
- name: Run Renovate
|
|
env:
|
|
RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
|
|
RENOVATE_PLATFORM: gitea
|
|
RENOVATE_ENDPOINT: https://git.keligrubb.com
|
|
RENOVATE_AUTODISCOVER: "true"
|
|
RENOVATE_GITHUB_COM_TOKEN: ${{ secrets.RENOVATE_GITHUB_COM_TOKEN }}
|
|
RENOVATE_CONFIG_FILE: renovate.json
|
|
run: npx renovate
|