renovate.yml

name: Renovate

on:
  schedule:
    - cron: '0 */2 * * *' # Every 2 hours
  pull_request:
    types: [closed]
    branches: [main]
  issues:
    types: [edited]
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}

permissions:
  contents: read

jobs:
  renovate:
    # Filter out noise: only run for schedule, manual dispatch, merged Renovate PRs,
    # and human-edited issues (not bot updates to the Dependency Dashboard).
    if: >-
      github.event_name == 'schedule' ||
      github.event_name == 'workflow_dispatch' ||
      (github.event_name == 'pull_request' && github.event.pull_request.merged == true && startsWith(github.event.pull_request.head.ref, 'renovate/')) ||
      (github.event_name == 'issues' && github.event.sender.type != 'Bot' && github.event.issue.number == 1166)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
        id: app-token
        with:
          client-id: ${{ secrets.ECOSPARK_APP_ID }}
          private-key: ${{ secrets.ECOSPARK_APP_PRIVATE_KEY }}

      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
          persist-credentials: false

      - name: Generate Renovate runner config
        env:
          REPOSITORY: ${{ github.repository }}
        run: |
          CONFIG_FILE="$GITHUB_WORKSPACE/.renovate-runner-config.json5"

          cat > "$CONFIG_FILE" <<'EOF'
          {
            $schema: "https://docs.renovatebot.com/renovate-schema.json",
            onboarding: false,
            requireConfig: "optional",
            allowedCommands: ["^pnpm install --lockfile-only --ignore-scripts --no-frozen-lockfile$", "^pnpm changeset:renovate .*$"],
          EOF

          echo "  repositories: [\"$REPOSITORY\"]," >> "$CONFIG_FILE"
          echo '}' >> "$CONFIG_FILE"

          echo "Generated config:"
          cat "$CONFIG_FILE"

      - name: Self-hosted Renovate
        uses: renovatebot/github-action@9fea9f0fbf80401026d11d03911d62b1f70fef1f # v46.3.3
        with:
          token: ${{ steps.app-token.outputs.token }}
          configurationFile: .renovate-runner-config.json5
        env:
          GITHUB_COM_TOKEN: ${{ github.token }}
          NODE_OPTIONS: '--max-old-space-size=4096'
          LOG_LEVEL: ${{ github.event_name == 'workflow_dispatch' && 'debug' || 'info' }}