ci: add Renovate for automated dependency updates #5

Merged

james merged 3 commits from ci/add-renovate into main 2026-09-06 18:19:33 +00:00

Conversation 1 Commits 3 Files changed 3 +25 -31

james commented 2026-09-06 17:44:37 +00:00

Owner

Copy link

Summary

Adds a scheduled Forgejo Actions workflow that runs Renovate against this repo, pointed at Forgejo natively (RENOVATE_PLATFORM=forgejo). Same setup as colibrisec/balam.

• renovate.json extends config:recommended.
• .forgejo/workflows/renovate.yml runs a version-pinned npx renovate (44.65.5, not latest) daily plus manual workflow_dispatch � pinned deliberately since this runs with write access via RENOVATE_TOKEN; bump the version by hand when needed.

Before merging

A RENOVATE_TOKEN repo secret needs to be added (Settings ? Actions ? Secrets): a personal API token, ideally for a dedicated bot account scoped only to the repos it needs to manage, with push + PR rights on this repo. Without it the workflow will run but fail to open PRs.

## Summary Adds a scheduled Forgejo Actions workflow that runs Renovate against this repo, pointed at Forgejo natively (`RENOVATE_PLATFORM=forgejo`). Same setup as colibrisec/balam. - `renovate.json` extends `config:recommended`. - `.forgejo/workflows/renovate.yml` runs a version-pinned `npx renovate` (44.65.5, not `latest`) daily plus manual `workflow_dispatch` � pinned deliberately since this runs with write access via `RENOVATE_TOKEN`; bump the version by hand when needed. ## Before merging A `RENOVATE_TOKEN` repo secret needs to be added (Settings ? Actions ? Secrets): a personal API token, ideally for a dedicated bot account scoped only to the repos it needs to manage, with push + PR rights on this repo. Without it the workflow will run but fail to open PRs.

james added 1 commit 2026-09-06 17:44:37 +00:00

ci: add Renovate for automated dependency updates ... e404925598

Scheduled Forgejo Actions workflow runs Renovate's CLI directly via npx
against this Forgejo instance (RENOVATE_PLATFORM=forgejo), daily plus
manual dispatch. renovate.json extends config:recommended.

Requires a RENOVATE_TOKEN repo secret (a personal API token with push/PR
rights) to be added before this can open PRs.

forgejo-actions commented 2026-09-06 17:46:26 +00:00

Copy link

🔎 ojo scan results

No findings.

<!-- ojo-scan-summary --> ### 🔎 ojo scan results No findings.

james force-pushed ci/add-renovate from e404925598 to 279d95620a 2026-09-06 17:56:11 +00:00 Compare

james added 1 commit 2026-09-06 18:06:22 +00:00

Update .forgejo/workflows/renovate.yml ... 1c0f329b6a

Move from branch tag to commit sha tag

james added 1 commit 2026-09-06 18:18:52 +00:00

Update security-scan and renovate.yml branch commits 61d62e0cec

james merged commit 275e5dbb61 into main 2026-09-06 18:19:33 +00:00

james deleted branch ci/add-renovate 2026-09-06 18:19:34 +00:00

james referenced this pull request from a commit 2026-09-06 18:19:35 +00:00

Merge pull request 'ci: add Renovate for automated dependency updates' (#5) from ci/add-renovate into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

ColibriSec/balam-forgejo!5

No description provided.