Skip to content

Renovate

Renovate #2

Workflow file for this run

# THIS FILE IS AUTOMATICALLY GENERATED. DO NOT EDIT.
# Edit https://github.com/cert-manager/makefile-modules/blob/main/modules/repository-base/base-dependabot/.github/workflows/renovate.yaml instead.
name: Renovate
on:
workflow_dispatch: {}
schedule:
- cron: '0 2 * * *'
permissions:
contents: read
jobs:
renovate:
runs-on: ubuntu-latest
if: github.repository == 'cert-manager/csi-lib'
permissions:
contents: write
issues: write
statuses: write
pull-requests: write
steps:
- name: Fail if branch is not head of branch.
if: ${{ !startsWith(github.ref, 'refs/heads/') && env.SOURCE_BRANCH != '' && env.SELF_UPGRADE_BRANCH != '' }}
run: |
echo "This workflow should not be run on a non-branch-head."
exit 1
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
# Adding `fetch-depth: 0` makes sure tags are also fetched. We need
# the tags so `git describe` returns a valid version.
# see https://github.com/actions/checkout/issues/701 for extra info about this option
with: { fetch-depth: 0 }
- id: go-version
run: |
make print-go-version >> "$GITHUB_OUTPUT"
- uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
with:
go-version: ${{ steps.go-version.outputs.result }}
- name: Self-hosted Renovate
uses: renovatebot/github-action@b11417b9eaac3145fe9a8544cee66503724e32b6 # v43.0.8
with:
configurationFile: .github/renovate.json5
token: ${{ secrets.GITHUB_TOKEN }}
env:
RENOVATE_REPOSITORIES: '["${{ github.repository }}"]'
RENOVATE_ONBOARDING: "false"
RENOVATE_PLATFORM: "github"
LOG_LEVEL: "debug"
RENOVATE_ALLOWED_COMMANDS: '["make generate"]'