Merge pull request 'chore(deps): update actions/checkout action to v7' (#53) from renovate/actions-checkout-7.x into main

Reviewed-on: #53

.gitea/workflows/renovate.yaml

@@ -2,19 +2,26 @@ name: renovate
 
 on:
   schedule:
-    - cron: "@daily"
+    - cron: "@hourly"
   push:
     branches:
       - main
 
+# Serialize runs: the hourly schedule and a push to main can otherwise overlap,
+# producing duplicate PRs and concurrent writes to Gitea.
+concurrency:
+  group: renovate
+  cancel-in-progress: false
+
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.142.0
+    container: ghcr.io/renovatebot/renovate:43.226.1@sha256:0b678d3b80ec23a7bf8c967b7796d9df09c50eac7fa16c7b4fd5761a9f4a7be0
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - run: renovate
         env:
-          RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js" # replace it with your config.js path
+          RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js"
-          LOG_LEVEL: "debug"
+          LOG_LEVEL: "info"
-          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }} # your Revonate bot token
+          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
+          RENOVATE_GITHUB_COM_TOKEN: ${{ secrets.RENOVATE_GITHUB_TOKEN }}

config.js

@@ -1,8 +1,35 @@
 module.exports = {
-    "endpoint": "https://code.emmathe.dev/api/v1", // replace it with your actual endpoint
+    "endpoint": "https://code.emmathe.dev/api/v1",
     "gitAuthor": "Renovate Bot <renovate-bot@iam.emmathe.dev>",
     "platform": "gitea",
     "onboardingConfigFileName": ".renovaterc.json",
     "autodiscover": true,
     "optimizeForDisabled": true,
+    "extends": ["config:best-practices"],
+    "schedule": ["* * * * 1-5"],
+    "timezone": "Europe/London",
+    "minimumReleaseAge": "3 days",
+    "labels": ["dependencies"],
+    "reviewers": ["lyrathorpe"],
+    "prHourlyLimit": 10,
+    "prConcurrentLimit": 10,
+    "branchConcurrentLimit": 10,
+    "packageRules": [
+        {
+            "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
+            "automerge": true
+        },
+        {
+            "matchUpdateTypes": ["major"],
+            "automerge": false
+        }
+    ],
+    "lockFileMaintenance": {
+        "enabled": true,
+        "schedule": ["before 4am on monday"]
+    },
+    "vulnerabilityAlerts": {
+        "enabled": true,
+        "schedule": ["at any time"]
+    }
 };