renovate-bot.yaml

name: Renovate bot
on:
  workflow_dispatch:
  schedule:
  - cron: "0 13 * * *"
concurrency:
  group: ${{ github.workflow }}
  cancel-in-progress: true

jobs:
  renovate:
    runs-on: renovate-${{ github.event.repository.name }}
    container:
      image: ghcr.io/renovatebot/renovate:43.90.0
    permissions:
      contents: write
      issues: write
      pull-requests: write
    steps:
    - name: Check for updates
      env:
        RENOVATE_PLATFORM: github
        RENOVATE_AUTODISCOVER: false
        # RENOVATE_TOKEN: ${{ secrets.GITHUB_TOKEN }} # pass RENOVATE_TOKEN from runner
        RENOVATE_CONFIG_FILE: /tmp/renovate.json
      run: |
        cat > $RENOVATE_CONFIG_FILE <<EOF
        {
          "repositories": [
            "${{ github.repository }}"
          ]
        }
        EOF

        exec renovate-entrypoint.sh renovate