name: renovate

on:
  schedule:
    - cron: "@hourly"
  push:
    branches:
      - main

# Serialize runs: the hourly schedule and a push to main can otherwise overlap,
# producing duplicate PRs and concurrent writes to Gitea.
concurrency:
  group: renovate
  cancel-in-progress: false

jobs:
  renovate:
    runs-on: ubuntu-latest
    container: ghcr.io/renovatebot/renovate:43.226.1@sha256:0b678d3b80ec23a7bf8c967b7796d9df09c50eac7fa16c7b4fd5761a9f4a7be0
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - run: renovate
        env:
          RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js"
          LOG_LEVEL: "info"
          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
          RENOVATE_GITHUB_COM_TOKEN: ${{ secrets.RENOVATE_GITHUB_TOKEN }}