renovate.yml

name: Renovate

on:
  schedule:
    # Run every Tuesday at 15:00 UTC (after Dependabot on Monday)
    - cron: '0 15 * * 2'
  workflow_dispatch:
    inputs:
      logLevel:
        description: 'Log level'
        required: false
        default: 'debug'
        type: choice
        options:
          - debug
          - info
          - warn
          - error

permissions:
  contents: write
  pull-requests: write
  issues: write

jobs:
  renovate:
    name: Renovate
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - name: Self-hosted Renovate
        uses: renovatebot/github-action@v46.0.2
        with:
          configurationFile: renovate.json
          token: ${{ secrets.GITHUB_TOKEN }}
        env:
          LOG_LEVEL: ${{ inputs.logLevel || 'info' }}
          RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS: '["^cat.*", "^echo.*", "^cut.*", "^sed.*", "^git add.*"]'
          RENOVATE_REPOSITORIES: ${{ github.repository }}