asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

ci: run Renovate from asxpi/renovate

Browse source 
Renovate now runs from its own repository for every repo, with the
shared rules in its preset. Extend that preset here and keep only what
is specific to this repo (the Ansible var manager, the Paper JRE, the
runner and nix notes); drop the workflow that ran it for iac alone.

Assisted-by: Claude:opus-5-5
This commit is contained in:
Sergei Poljanski 2026-11-13 00:00:06 +04:00
commit 35c6ab5e30
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
2 changed files with 21 additions and 49 deletions
Download patch file Download diff file Expand all files Collapse all files

32
.forgejo/workflows/renovate.yaml
View file

@ -1,32 +0,0 @@
name: renovate
# Opens a PR per available version bump (image tags, restic, ...), with
# the upstream release notes in the PR body. Configuration: renovate.json.
#
# Secrets: RENOVATE_TOKEN (Forgejo token of the renovate-bot user, a
# collaborator with write access) and GH_COM_TOKEN (read-only github.com
# token, only for fetching release notes; without it PRs have none).
on:
schedule:
- cron: "17 5 * * *"
workflow_dispatch:
jobs:
renovate:
runs-on: ubuntu-latest
container:
image: ghcr.io/renovatebot/renovate:44.236.2
steps:
- name: Run Renovate
env:
RENOVATE_PLATFORM: forgejo
RENOVATE_ENDPOINT: https://git.asxp.io/api/v1
RENOVATE_REPOSITORIES: asxpi/iac
RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
RENOVATE_GITHUB_COM_TOKEN: ${{ secrets.GH_COM_TOKEN }}
RENOVATE_GIT_AUTHOR: "Renovate Bot <renovate-bot@noreply.git.asxp.io>"
RENOVATE_ONBOARDING: "false"
RENOVATE_REQUIRE_CONFIG: required
LOG_LEVEL: info
run: renovate

38
renovate.json
View file

@ -1,16 +1,15 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": ["config:recommended", ":disableDependencyDashboard"],
"timezone": "Europe/Helsinki",
"labels": ["dependencies"],
"prHourlyLimit": 0,
"prConcurrentLimit": 10,
"commitMessagePrefix": "deps:",
"extends": [
"local>asxpi/renovate"
],
"customManagers": [
{
"description": "Versions in Ansible vars, marked with a comment: # renovate: datasource=<ds> depName=<name>",
"customType": "regex",
"managerFilePatterns": ["/^ansible/.+\\.ya?ml$/"],
"managerFilePatterns": [
"/^ansible/.+\\.ya?ml$/"
],
"matchStrings": [
"# renovate: datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)\\s+[a-z_0-9]+:\\s*\"?(?<currentValue>[^\"\\s]+)\"?"
]
@ -19,23 +18,28 @@
"packageRules": [
{
"description": "Paper needs Java 21; the tag is a floating JRE line",
"matchPackageNames": ["eclipse-temurin"],
"matchPackageNames": [
"eclipse-temurin"
],
"enabled": false
},
{
"description": "Every job runs this image and a nix-store volume tied to its version",
"matchPackageNames": ["nixos/nix"],
"prBodyNotes": ["After merging, remove the old `nix-store-<old version>` volume on asxpio-services (see forgejo_runner.yaml)."]
"matchPackageNames": [
"nixos/nix"
],
"prBodyNotes": [
"After merging, remove the old `nix-store-<old version>` volume on asxpio-services (see forgejo_runner.yaml)."
]
},
{
"description": "A runner change recreates the runner mid-job",
"matchPackageNames": ["code.forgejo.org/forgejo/runner"],
"prBodyNotes": ["The deploy job that applies this shows as cancelled; the next run confirms the result."]
},
{
"description": "Renovate itself releases daily; once a month is enough",
"matchPackageNames": ["ghcr.io/renovatebot/renovate"],
"schedule": ["* * 1 * *"]
"matchPackageNames": [
"code.forgejo.org/forgejo/runner"
],
"prBodyNotes": [
"The deploy job that applies this shows as cancelled; the next run confirms the result."
]
}
]
}