Compare commits

..

30 Commits

Author SHA1 Message Date
lyrathorpe 1b4c1a26f8 Merge pull request 'chore(deps): update actions/checkout action to v7' (#53) from renovate/actions-checkout-7.x into main
renovate / renovate (push) Successful in 1m58s
Reviewed-on: #53
2026-06-22 16:27:51 +01:00
Renovate Bot 1be07d8ed1 chore(deps): update actions/checkout action to v7
renovate/stability-days Updates have met minimum release age requirement
2026-06-21 23:02:53 +00:00
lyrathorpe 3f2d51015b Merge pull request 'config: tune concurrency, security scheduling, stability, noise' (#52) from config/tuning into main
renovate / renovate (push) Successful in 1m7s
Reviewed-on: #52
2026-06-16 14:52:18 +01:00
lyrathorpe 75ee02da0c Merge pull request 'ci(renovate): serialize runs, quiet logs, clean config-file env' (#51) from ci/workflow-hardening into main
renovate / renovate (push) Waiting to run
Reviewed-on: #51
2026-06-16 14:51:50 +01:00
Emma Thorpe 653934dc98 config: tune concurrency, security scheduling, stability, noise
- Reconcile concurrency limits: prConcurrentLimit 50 -> 10 and
  branchConcurrentLimit 5 -> 10 (every PR needs a branch, so the old 5 capped
  effective PRs and made 50 meaningless).
- Let vulnerability updates bypass the weekday schedule
  (vulnerabilityAlerts.schedule = at any time) so weekend CVE fixes are not
  held until Monday.
- Add minimumReleaseAge = 3 days so a release ages before it is opened or
  automerged (guards against broken/yanked releases).
- Drop redundant assignees (same single user as reviewers) -- noise on every
  PR, including auto-merged ones.

Closes #46
Closes #47
Closes #48
Closes #49
2026-06-16 14:44:52 +01:00
Emma Thorpe 85dcbf1aa0 ci(renovate): serialize runs, quiet logs, clean config-file env
- Add a concurrency group so the hourly schedule and push-to-main triggers
  cannot run Renovate twice at once (avoids duplicate PRs and concurrent Gitea
  writes).
- Lower LOG_LEVEL from debug to info for normal operation.
- Remove leftover template comments from the RENOVATE_CONFIG_FILE and token env.

Closes #43
Closes #44
Closes #45
2026-06-16 14:43:43 +01:00
renovate-bot b2fc6a58eb Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.226.1' (#42) from renovate/ghcr.io-renovatebot-renovate-43.x into main
renovate / renovate (push) Successful in 1m55s
2026-06-16 12:04:06 +01:00
Renovate Bot a80f23a2d1 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.226.1 2026-06-16 11:01:42 +00:00
lyrathorpe 5bdc1afe60 Merge pull request 'fix(renovate.yaml): bump to hourly runs' (#41) from fix/schedule into main
renovate / renovate (push) Successful in 4m1s
Reviewed-on: #41
2026-06-16 12:00:53 +01:00
lyrathorpe 6b7a869713 fix(renovate.yaml): bump to hourly runs
prevents 24h lag in lockfile maintenance, etc
2026-06-16 12:00:35 +01:00
renovate-bot e4fc46c244 Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.224.1' (#40) from renovate/ghcr.io-renovatebot-renovate-43.x into main
renovate / renovate (push) Successful in 1m54s
2026-06-16 01:04:06 +01:00
Renovate Bot 294cf62f79 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.224.1 2026-06-16 00:01:44 +00:00
renovate-bot 75863cc22a Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.222.1' (#39) from renovate/ghcr.io-renovatebot-renovate-43.x into main
renovate / renovate (push) Successful in 2m17s
2026-06-15 01:05:32 +01:00
Renovate Bot aee89cfcff chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.222.1 2026-06-15 00:03:17 +00:00
renovate-bot 3e284fe3c4 Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.220.0' (#38) from renovate/ghcr.io-renovatebot-renovate-43.x into main
renovate / renovate (push) Successful in 1m3s
2026-06-11 01:03:30 +01:00
Renovate Bot 6bc8385304 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.220.0 2026-06-11 00:01:13 +00:00
renovate-bot 1313b0759a Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.217.0' (#37) from renovate/ghcr.io-renovatebot-renovate-43.x into main
renovate / renovate (push) Successful in 1m21s
2026-06-10 01:03:43 +01:00
Renovate Bot 566f94b974 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.217.0 2026-06-10 00:01:22 +00:00
renovate-bot b97e93fc8f Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.216.2' (#36) from renovate/ghcr.io-renovatebot-renovate-43.x into main
renovate / renovate (push) Successful in 2m3s
2026-06-09 01:04:04 +01:00
Renovate Bot a108113c33 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.216.2 2026-06-09 00:01:37 +00:00
renovate-bot 3ff1e14c4f Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.214.5' (#35) from renovate/ghcr.io-renovatebot-renovate-43.x into main
renovate / renovate (push) Successful in 1m59s
2026-06-08 01:06:05 +01:00
Renovate Bot 9fb393e841 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.214.5 2026-06-08 00:03:24 +00:00
renovate-bot 693bbc1371 Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.212.4' (#34) from renovate/ghcr.io-renovatebot-renovate-43.x into main
renovate / renovate (push) Successful in 1m40s
2026-06-05 01:03:52 +01:00
Renovate Bot f75c084f98 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.212.4 2026-06-05 00:01:16 +00:00
renovate-bot 31657c6391 Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.210.2' (#33) from renovate/ghcr.io-renovatebot-renovate-43.x into main
renovate / renovate (push) Successful in 1m2s
2026-06-04 01:04:22 +01:00
renovate-bot bae878bf10 Merge pull request 'chore(deps): update actions/checkout digest to df4cb1c' (#32) from renovate/actions-checkout-digest into main
renovate / renovate (push) Successful in 40s
2026-06-04 01:01:55 +01:00
Renovate Bot ff37a40c23 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.210.2 2026-06-04 00:01:54 +00:00
Renovate Bot aa908ec263 chore(deps): update actions/checkout digest to df4cb1c 2026-06-04 00:01:52 +00:00
renovate-bot c2a0935f6a Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.209.1' (#31) from renovate/ghcr.io-renovatebot-renovate-43.x into main
renovate / renovate (push) Successful in 1m26s
2026-06-03 01:04:46 +01:00
Renovate Bot 06c323bb26 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.209.1 2026-06-03 00:02:10 +00:00
2 changed files with 17 additions and 10 deletions
+12 -6
View File
@@ -2,20 +2,26 @@ name: renovate
on:
schedule:
- cron: "@daily"
- cron: "@hourly"
push:
branches:
- main
# Serialize runs: the hourly schedule and a push to main can otherwise overlap,
# producing duplicate PRs and concurrent writes to Gitea.
concurrency:
group: renovate
cancel-in-progress: false
jobs:
renovate:
runs-on: ubuntu-latest
container: ghcr.io/renovatebot/renovate:43.209.0@sha256:d18fd34cb125662aa78647053e9a45240582002f469dc5def7f7576baea12af9
container: ghcr.io/renovatebot/renovate:43.226.1@sha256:0b678d3b80ec23a7bf8c967b7796d9df09c50eac7fa16c7b4fd5761a9f4a7be0
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
- run: renovate
env:
RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js" # replace it with your config.js path
LOG_LEVEL: "debug"
RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }} # your Revonate bot token
RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js"
LOG_LEVEL: "info"
RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
RENOVATE_GITHUB_COM_TOKEN: ${{ secrets.RENOVATE_GITHUB_TOKEN }}
+5 -4
View File
@@ -8,12 +8,12 @@ module.exports = {
"extends": ["config:best-practices"],
"schedule": ["* * * * 1-5"],
"timezone": "Europe/London",
"minimumReleaseAge": "3 days",
"labels": ["dependencies"],
"assignees": ["lyrathorpe"],
"reviewers": ["lyrathorpe"],
"prHourlyLimit": 10,
"prConcurrentLimit": 50,
"branchConcurrentLimit": 5,
"prConcurrentLimit": 10,
"branchConcurrentLimit": 10,
"packageRules": [
{
"matchUpdateTypes": ["minor", "patch", "pin", "digest"],
@@ -29,6 +29,7 @@ module.exports = {
"schedule": ["before 4am on monday"]
},
"vulnerabilityAlerts": {
"enabled": true
"enabled": true,
"schedule": ["at any time"]
}
};