Skip to content

chore(deps): update astral-sh/setup-uv action to v9 #1804

chore(deps): update astral-sh/setup-uv action to v9

chore(deps): update astral-sh/setup-uv action to v9 #1804

name: Renovate Configuration Validation
on:
push:
paths:
- 'renovate.json'
- '.github/workflows/renovate-validation.yml'
- 'test/renovate/**'
- 'npx/**/spec.yaml'
- 'npx/**/spec.yml'
- 'uvx/**/spec.yaml'
- 'uvx/**/spec.yml'
- 'go/**/spec.yaml'
- 'go/**/spec.yml'
pull_request:
paths:
- 'renovate.json'
- '.github/workflows/renovate-validation.yml'
- 'test/renovate/**'
- 'npx/**/spec.yaml'
- 'npx/**/spec.yml'
- 'uvx/**/spec.yaml'
- 'uvx/**/spec.yml'
- 'go/**/spec.yaml'
- 'go/**/spec.yml'
workflow_dispatch:
permissions:
contents: read
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
validate-config:
name: Validate Renovate Configuration
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Setup Node.js
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: '24'
cache: 'npm'
cache-dependency-path: 'test/renovate/package-lock.json'
- name: Install dependencies
working-directory: test/renovate
run: npm ci || npm install
- name: Validate Renovate config syntax
run: npx --yes --package renovate -- renovate-config-validator
- name: Test regex patterns
working-directory: test/renovate
run: npm test
- name: Check for deprecated config
run: |
npx --yes --package renovate -- renovate-config-validator --strict || {
echo "::warning::Configuration uses deprecated options. Consider migrating."
exit 0
}
test-dry-run:
name: Test Renovate Dry Run
runs-on: ubuntu-latest
if: github.event_name == 'pull_request'
steps:
- name: Generate GitHub App token
id: app-token
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
with:
client-id: ${{ vars.RELEASE_APP_CLIENT_ID }}
private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
# Dry-run only reads repo state; write scopes implicitly grant read.
permission-contents: write
permission-pull-requests: write
- name: Checkout repository
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Setup Node.js
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: '24'
- name: Dry run Renovate
env:
LOG_LEVEL: debug
RENOVATE_TOKEN: ${{ steps.app-token.outputs.token }}
GITHUB_REPO: ${{ github.repository }}
run: |
npx --yes --package renovate -- renovate \
--platform=github \
--token="${RENOVATE_TOKEN}" \
--dry-run=full \
--print-config \
--autodiscover=false \
"$GITHUB_REPO" || {
echo "::warning::Dry run failed. This might be due to missing permissions or configuration issues."
exit 0
}