Compare commits

...

2 Commits

Author SHA1 Message Date
lyrathorpe 75ee02da0c Merge pull request 'ci(renovate): serialize runs, quiet logs, clean config-file env' (#51) from ci/workflow-hardening into main
renovate / renovate (push) Waiting to run
Reviewed-on: #51
2026-06-16 14:51:50 +01:00
Emma Thorpe 85dcbf1aa0 ci(renovate): serialize runs, quiet logs, clean config-file env
- Add a concurrency group so the hourly schedule and push-to-main triggers
  cannot run Renovate twice at once (avoids duplicate PRs and concurrent Gitea
  writes).
- Lower LOG_LEVEL from debug to info for normal operation.
- Remove leftover template comments from the RENOVATE_CONFIG_FILE and token env.

Closes #43
Closes #44
Closes #45
2026-06-16 14:43:43 +01:00
+9 -3
View File
@@ -7,6 +7,12 @@ on:
branches:
- main
# Serialize runs: the hourly schedule and a push to main can otherwise overlap,
# producing duplicate PRs and concurrent writes to Gitea.
concurrency:
group: renovate
cancel-in-progress: false
jobs:
renovate:
runs-on: ubuntu-latest
@@ -15,7 +21,7 @@ jobs:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
- run: renovate
env:
RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js" # replace it with your config.js path
LOG_LEVEL: "debug"
RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }} # your Revonate bot token
RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js"
LOG_LEVEL: "info"
RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
RENOVATE_GITHUB_COM_TOKEN: ${{ secrets.RENOVATE_GITHUB_TOKEN }}