👷 (ci): Run Renovate weekly against the git-shark instance
Changes
3 files changed, +73 -0
ADD
.github/workflows/renovate.yml
+47 -0
@@ -0,0 +1,47 @@
1
+name: Renovate
2
+
3
+# Runs Renovate against the self-hosted git-shark instance (Gitea-compatible
4
+# /api/v1) once a week, opening dependency-update pull requests on gitshark.de.
5
+# This workflow runs on GitHub (via the mirror); Renovate reaches back to
6
+# gitshark.de over public HTTPS to create the PRs.
7
+#
8
+# Required repository secret:
9
+# RENOVATE_TOKEN — a git-shark personal access token (Settings → Access tokens)
10
+# for an account with write access to workaround/Gitshark.
11
+# Optional:
12
+# RENOVATE_GITHUB_COM_TOKEN — a github.com read token so Renovate can fetch
13
+# changelogs/release notes and avoid public rate limits.
14
+
15
+on:
16
+ schedule:
17
+ - cron: '0 6 * * 1' # Mondays, 06:00 UTC
18
+ workflow_dispatch: {} # allow manual runs from the Actions tab
19
+
20
+concurrency:
21
+ group: renovate
22
+ cancel-in-progress: false
23
+
24
+permissions:
25
+ contents: read
26
+
27
+jobs:
28
+ renovate:
29
+ runs-on: ubuntu-latest
30
+ steps:
31
+ - name: Run Renovate
32
+ uses: renovatebot/github-action@v46.1.20
33
+ with:
34
+ token: ${{ secrets.RENOVATE_TOKEN }}
35
+ env:
36
+ RENOVATE_PLATFORM: gitea
37
+ RENOVATE_ENDPOINT: https://gitshark.de/api/v1
38
+ RENOVATE_AUTODISCOVER: "false"
39
+ RENOVATE_REPOSITORIES: workaround/Gitshark
40
+ RENOVATE_ONBOARDING: "false"
41
+ RENOVATE_DEPENDENCY_DASHBOARD: "false"
42
+ RENOVATE_REQUIRE_CONFIG: optional
43
+ # Do NOT set RENOVATE_GIT_URL: git-shark serves git under
44
+ # /git/<owner>/<repo>.git, so Renovate must clone from the repo's
45
+ # clone_url (the default), not from the API endpoint path.
46
+ LOG_LEVEL: debug
47
+ GITHUB_COM_TOKEN: ${{ secrets.RENOVATE_GITHUB_COM_TOKEN }}
MODIFY
docs/admins/renovate.md
+20 -0
@@ -60,6 +60,26 @@
60
60
- Release-notes retrieval logs a warning without a `github.com` token; it does
61
61
not block PR creation.
62
62
63
+## Scheduled runs via GitHub Actions
64
+
65
+This repository ships `.github/workflows/renovate.yml`, which runs Renovate on
66
+a weekly schedule (Mondays 06:00 UTC) and on manual dispatch. The workflow runs
67
+on GitHub (via the mirror) and reaches back to `https://gitshark.de/api/v1` to
68
+open PRs on `workaround/Gitshark`.
69
+
70
+To enable it, add repository secrets on the GitHub mirror:
71
+
72
+- **`RENOVATE_TOKEN`** (required) — a git-shark personal access token for an
73
+ account with write access to the target repository.
74
+- **`RENOVATE_GITHUB_COM_TOKEN`** (optional) — a `github.com` read-only token so
75
+ Renovate can fetch changelogs/release notes and avoid public rate limits.
76
+
77
+Trigger a first run manually from the **Actions → Renovate → Run workflow**
78
+button rather than waiting for the schedule. Tune what gets updated via the
79
+repository's root `renovate.json`; widen coverage by adding repositories to
80
+`RENOVATE_REPOSITORIES` in the workflow (keep `RENOVATE_AUTODISCOVER=false` to
81
+stay explicit).
82
+
63
83
## Verifying
64
84
65
85
With `LOG_LEVEL=debug`, a successful run clones the repo, extracts the
ADD
renovate.json
+6 -0
@@ -0,0 +1,6 @@
1
+{
2
+ "$schema": "https://docs.renovatebot.com/renovate-schema.json",
3
+ "extends": [
4
+ "config:recommended"
5
+ ]
6
+}