Renovate #9967

	---
	name: "Renovate"

	on:
	workflow_dispatch:
	inputs:
	dryRun:
	description: Dry Run
	default: "false"
	required: false
	logLevel:
	description: Log Level
	default: debug
	required: false
	version:
	description: Renovate version
	default: latest
	required: false
	schedule:
	- cron: "0 * * * *" # Every hour
	push:
	branches: ["main"]
	paths:
	- .github/renovate.json5
	- .github/renovate/**.json5

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.number \|\| github.ref }}
	cancel-in-progress: true

	env:
	LOG_LEVEL: "${{ inputs.logLevel \|\| 'debug' }}"
	RENOVATE_AUTODISCOVER: true
	RENOVATE_AUTODISCOVER_FILTER: "${{ github.repository }}"
	RENOVATE_DRY_RUN: "${{ inputs.dryRun == true }}"
	RENOVATE_PLATFORM: github
	RENOVATE_PLATFORM_COMMIT: true
	WORKFLOW_RENOVATE_VERSION: "${{ inputs.version \|\| 'latest' }}"

	jobs:
	renovate:
	name: Renovate
	runs-on: ubuntu-latest
	steps:
	- name: Generate Token
	uses: actions/create-github-app-token@3378cda945da322a8db4b193e19d46352ebe2de5 # v1
	id: app-token
	with:
	app-id: "${{ secrets.BOT_APP_ID }}"
	private-key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"

	- name: Checkout
	uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
	with:
	token: "${{ steps.app-token.outputs.token }}"

	- name: Renovate
	uses: renovatebot/github-action@630a255a1f2f56c8d8ce160bed3e3ca577ca53e2 # v40.2.7
	with:
	configurationFile: .github/renovate.json5
	token: "${{ steps.app-token.outputs.token }}"
	renovate-version: "${{ env.WORKFLOW_RENOVATE_VERSION }}"

Provide feedback