Renovate #3892

	---
	# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
	name: "Renovate"

	on:
	workflow_dispatch:
	inputs:
	dryRun:
	description: Dry Run
	default: "false"
	required: false
	logLevel:
	description: Log Level
	default: debug
	required: false
	version:
	description: Renovate version
	default: latest
	required: false
	schedule:
	- cron: "0 2 * * *" # Every night at 0200
	push:
	branches: ["main"]
	paths:
	- .github/renovate.json5
	- .github/renovate/**.json5
	pull_request:
	merge_group:

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.number \|\| github.ref }}
	cancel-in-progress: true

	env:
	LOG_LEVEL: "${{ inputs.logLevel \|\| 'debug' }}"
	RENOVATE_AUTODISCOVER: true
	RENOVATE_AUTODISCOVER_FILTER: "${{ github.repository }}"
	RENOVATE_DRY_RUN: "${{ inputs.dryRun == true }}"
	RENOVATE_PLATFORM: github
	RENOVATE_PLATFORM_COMMIT: true
	# FIXME: Revert to 'latest' when the nixpkgs-lib issue is resolved
	WORKFLOW_RENOVATE_VERSION: "${{ inputs.version \|\| '39.146.0' }}"
	jobs:
	renovate:
	name: Renovate
	runs-on: ubuntu-latest
	steps:
	- name: Generate Token
	uses: actions/create-github-app-token@v1
	id: app-token
	with:
	app-id: "${{ secrets.BOT_APP_ID }}"
	private-key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"

	- name: Checkout
	uses: actions/checkout@v4
	with:
	token: "${{ steps.app-token.outputs.token }}"

	- name: Renovate
	uses: renovatebot/github-action@v41.0.13
	with:
	configurationFile: .github/renovate.json5
	token: "${{ steps.app-token.outputs.token }}"
	renovate-version: "${{ env.WORKFLOW_RENOVATE_VERSION }}"

Provide feedback