lyrathorpe/renovate-config
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: lyrathorpe/renovate-config:75863cc22aca21a52541c83395072db580f6eb84
Branches Tags
lyrathorpe/renovate-config:main
...
compare: lyrathorpe/renovate-config:main
Branches Tags
lyrathorpe/renovate-config:main

12 Commits
75863cc22a ... main

Author SHA1 Message Date
lyrathorpe 1b4c1a26f8 Merge pull request 'chore(deps): update actions/checkout action to v7' (#53) from renovate/actions-checkout-7.x into main
renovate / renovate (push) Successful in 1m58s
Details 
Reviewed-on: #53
 2026-06-22 16:27:51 +01:00
Renovate Bot 1be07d8ed1 chore(deps): update actions/checkout action to v7
renovate/stability-days Updates have met minimum release age requirement
Details
2026-06-21 23:02:53 +00:00
lyrathorpe 3f2d51015b Merge pull request 'config: tune concurrency, security scheduling, stability, noise' (#52) from config/tuning into main
renovate / renovate (push) Successful in 1m7s
Details 
Reviewed-on: #52
 2026-06-16 14:52:18 +01:00
lyrathorpe 75ee02da0c Merge pull request 'ci(renovate): serialize runs, quiet logs, clean config-file env' (#51) from ci/workflow-hardening into main
renovate / renovate (push) Waiting to run
Details 
Reviewed-on: #51
 2026-06-16 14:51:50 +01:00
Emma Thorpe 653934dc98 config: tune concurrency, security scheduling, stability, noise 
- Reconcile concurrency limits: prConcurrentLimit 50 -> 10 and
  branchConcurrentLimit 5 -> 10 (every PR needs a branch, so the old 5 capped
  effective PRs and made 50 meaningless).
- Let vulnerability updates bypass the weekday schedule
  (vulnerabilityAlerts.schedule = at any time) so weekend CVE fixes are not
  held until Monday.
- Add minimumReleaseAge = 3 days so a release ages before it is opened or
  automerged (guards against broken/yanked releases).
- Drop redundant assignees (same single user as reviewers) -- noise on every
  PR, including auto-merged ones.

Closes #46
Closes #47
Closes #48
Closes #49
 2026-06-16 14:44:52 +01:00
Emma Thorpe 85dcbf1aa0 ci(renovate): serialize runs, quiet logs, clean config-file env 
- Add a concurrency group so the hourly schedule and push-to-main triggers
  cannot run Renovate twice at once (avoids duplicate PRs and concurrent Gitea
  writes).
- Lower LOG_LEVEL from debug to info for normal operation.
- Remove leftover template comments from the RENOVATE_CONFIG_FILE and token env.

Closes #43
Closes #44
Closes #45
 2026-06-16 14:43:43 +01:00
renovate-bot b2fc6a58eb Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.226.1' (#42) from renovate/ghcr.io-renovatebot-renovate-43.x into main
renovate / renovate (push) Successful in 1m55s
Details
2026-06-16 12:04:06 +01:00
Renovate Bot a80f23a2d1 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.226.1 2026-06-16 11:01:42 +00:00
lyrathorpe 5bdc1afe60 Merge pull request 'fix(renovate.yaml): bump to hourly runs' (#41) from fix/schedule into main
renovate / renovate (push) Successful in 4m1s
Details 
Reviewed-on: #41
 2026-06-16 12:00:53 +01:00
lyrathorpe 6b7a869713 fix(renovate.yaml): bump to hourly runs 
prevents 24h lag in lockfile maintenance, etc
 2026-06-16 12:00:35 +01:00
renovate-bot e4fc46c244 Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.224.1' (#40) from renovate/ghcr.io-renovatebot-renovate-43.x into main
renovate / renovate (push) Successful in 1m54s
Details
2026-06-16 01:04:06 +01:00
Renovate Bot 294cf62f79 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.224.1 2026-06-16 00:01:44 +00:00
2 changed files with 17 additions and 10 deletions
Expand all files Collapse all files
.gitea/workflows/renovate.yaml
+12 -6
View File
@@ -2,20 +2,26 @@ name: renovate
on:
schedule:
- cron: "@daily"
- cron: "@hourly"
push:
branches:
- main
# Serialize runs: the hourly schedule and a push to main can otherwise overlap,
# producing duplicate PRs and concurrent writes to Gitea.
concurrency:
group: renovate
cancel-in-progress: false
jobs:
renovate:
runs-on: ubuntu-latest
container: ghcr.io/renovatebot/renovate:43.222.1@sha256:04931b21787bb211161261a27f12069c342705ef4e03481c6d8189675e76a027
container: ghcr.io/renovatebot/renovate:43.226.1@sha256:0b678d3b80ec23a7bf8c967b7796d9df09c50eac7fa16c7b4fd5761a9f4a7be0
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
- run: renovate
env:
RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js" # replace it with your config.js path
LOG_LEVEL: "debug"
RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }} # your Revonate bot token
RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js"
LOG_LEVEL: "info"
RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
RENOVATE_GITHUB_COM_TOKEN: ${{ secrets.RENOVATE_GITHUB_TOKEN }}
config.js
+5 -4
View File
@@ -8,12 +8,12 @@ module.exports = {
"extends": ["config:best-practices"],
"schedule": ["* * * * 1-5"],
"timezone": "Europe/London",
"minimumReleaseAge": "3 days",
"labels": ["dependencies"],
"assignees": ["lyrathorpe"],
"reviewers": ["lyrathorpe"],
"prHourlyLimit": 10,
"prConcurrentLimit": 50,
"branchConcurrentLimit": 5,
"prConcurrentLimit": 10,
"branchConcurrentLimit": 10,
"packageRules": [
{
"matchUpdateTypes": ["minor", "patch", "pin", "digest"],
@@ -29,6 +29,7 @@ module.exports = {
"schedule": ["before 4am on monday"]
},
"vulnerabilityAlerts": {
"enabled": true
"enabled": true,
"schedule": ["at any time"]
}
};