renovate.yml

name: Renovate
on:
  push:
    paths:
    - renovate.json
    - .github/workflows/renovate.yml
  workflow_dispatch:
    inputs:
      dry-run:
        description: 'Dry run'
        required: false
        default: 'false'

concurrency:
  group: renovate

jobs:

  renovate:
    runs-on: ubuntu-22.04
    permissions: write-all
    steps:

    - name: Restore cache
      id: cache-restore
      uses: actions/cache/restore@v3
      with:
        path: renovate/cache
        key: renovate-cache
        restore-keys: |
          renovate-cache-${{ github.sha }}
          renovate-cache-

    - name: Prepare permissions
      run: |
        mkdir -p renovate/cache
        docker run --rm \
            --volume $PWD/renovate:/tmp/renovate \
            ubuntu:22.04 \
                chown -R 1000:0 /tmp/renovate

    - name: Self-hosted Renovate
      env:
        LOG_LEVEL: debug
        RENOVATE_TOKEN: ${{ secrets.BOT_RENOVATE }}
      run: |
        docker run --interactive --rm \
            --env LOG_LEVEL \
            --env RENOVATE_TOKEN="${RENOVATE_TOKEN}" \
            --volume $PWD/renovate:/tmp/renovate \
            renovate/renovate:slim \
                --dry-run=${{ inputs.dry-run }} \
                "${GITHUB_REPOSITORY}"

    - name: Save cache
      id: cache-save
      uses: actions/cache/save@v3
      with:
        path: renovate/cache
        key: ${{ steps.cache-restore.outputs.cache-primary-key }}-${{ github.sha }}