Renovate

Setup Renovate Runner within Gitlab:

include:
  - component: $CI_SERVER_FQDN/$CI_PROJECT_PATH/runner@<VERSION>

stages: [build, test, run]

Add a config.js in the project. e.g:

module.exports = {
  token: process.env.GITHUB_COM_TOKEN,
  hostRules: [
    {
      hostType: 'maven',
      matchHost: process.env.CI_SERVER_HOST,
      token: process.env.RENOVATE_TOKEN,
    },
    {
      hostType: 'docker',
      matchHost: process.env.CI_REGISTRY,
      username: 'ci',
      password: process.env.RENOVATE_TOKEN,
    },
  ],
  registryAliases:{
    "$CI_REGISTRY": process.env.CI_REGISTRY,
    "$CI_SERVER_FQDN": process.env.CI_SERVER_FQDN,
    "$CI_SERVER_HOST": process.env.CI_SERVER_FQDN
  },
  forkProcessing: 'enabled',
  platformAutomerge: true,
  autodiscover: true,
  allowScripts: true,
  exposeAllEnv: true,
  persistRepoData: true
};

Add the following Tokens as CI/CD:

• RENOVATE_TOKEN - Gitlab PAT for Renovate user, can be omitted with Service Accounts, see ##Setup.
• GITHUB_TOKEN - Github access token to omit api rate limit errors

If you want to customize Dry Run just overwrite:

include:
  - component: $CI_SERVER_FQDN/components/renovate/runner-template@<VERSION>

stages: [test, deploy]

Dry Run:
  variables:
    # limit dry run to a filter
    RENOVATE_AUTODISCOVER_FILTER: '...'

Setup

If your Gitlab license allows creation of service accounts you can run the manual job Setup Renovate. Just add the desired group id where the service account should be created via variables:

    SERVICEACCOUNT_GROUP_ID: ...

By default the $CI_JOB_TOKEN is used. To adjust assign to variable $GITLAB_TOKEN:

Setup Renovate:
  variables:
  SERVICEACCOUNT_GROUP_ID: ...
    GITLAB_TOKEN: $CI_JOB_TOKEN

Then run the manual job:

Then check the job output. It should look like this:

Login to GitLab CLI (gitlab.com)...
WARNING: One of GITLAB_TOKEN, GITLAB_ACCESS_TOKEN, OAUTH_TOKEN environment variables is set. If you don't want to use it for glab, unset it.
Creating service account gitlab_renovate_bot in group 117849439 ...
Created service account with id 31667576
Setting CI/CD variable in project
Created variable RENOVATE_TOKEN for cloudtooling/renovate with scope *.

On default it adds a CI/CD variable RENOVATE_TOKEN in the current Gitlab Job which is used by the CI/CD component. You can use this Account to add project to renovate.