name: Renovate

# Gitea #94 — no dependency update automation existed at all. Runs the
# official renovate/renovate Docker image against this Gitea instance.
#
# Requires a `RENOVATE_TOKEN` repo/org secret: a Gitea access token with
# read/write on LotusGuild/cinny and LotusGuild/element-call, created by a
# maintainer — this workflow does not (and cannot) create one for you.
# Note: Gitea reserves the `GITEA_` secret-name prefix, so the token cannot
# be named e.g. `GITEA_TOKEN` — hence `RENOVATE_TOKEN`.
on:
  schedule:
    - cron: '0 4 * * 1' # weekly, Monday 04:00 UTC
  workflow_dispatch: {}

jobs:
  renovate:
    name: Renovate
    runs-on: ubuntu-latest
    # Gated on the Actions VARIABLE `RENOVATE_ENABLED` == "true" (set it together
    # with the RENOVATE_TOKEN secret). Gitea ignores job-level continue-on-error
    # for the run conclusion, so without the gate every weekly run would be red
    # until the token exists. Also needs a Docker-capable runner (uses the
    # renovate/renovate image) — see CI_HAS_DOCKER in ci.yml.
    if: ${{ vars.RENOVATE_ENABLED == 'true' }}
    steps:
      - name: Run Renovate
        uses: docker://renovate/renovate:44
        env:
          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
          RENOVATE_PLATFORM: gitea
          RENOVATE_ENDPOINT: https://code.lotusguild.org/api/v1
          RENOVATE_REPOSITORIES: LotusGuild/cinny,LotusGuild/element-call