Set up self-hosted Renovate for automated dependency updates

Renovate runs weekly (Monday 4am) and scans all LotusGuild repos for outdated dependencies, creating PRs for updates. Patch and devDeps updates are configured to automerge. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-14 11:47:23 -04:00
parent cc16b5bff3
commit e82fad7820
2 changed files with 59 additions and 0 deletions
@@ -0,0 +1,25 @@
+name: Renovate
+
+on:
+  schedule:
+    - cron: '0 4 * * 1'
+  workflow_dispatch:
+
+jobs:
+  renovate:
+    name: Renovate dependency updates
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Run Renovate
+        env:
+          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
+          LOG_LEVEL: info
+        run: |
+          npm install -g renovate
+          renovate \
+            --platform gitea \
+            --endpoint https://code.lotusguild.org \
+            --token "$RENOVATE_TOKEN" \
+            --config-file renovate.json
@@ -0,0 +1,34 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "platform": "gitea",
+  "endpoint": "https://code.lotusguild.org",
+  "repositories": [
+    "LotusGuild/pulse",
+    "LotusGuild/gandalf",
+    "LotusGuild/heist-crew",
+    "LotusGuild/hwmonDaemon",
+    "LotusGuild/analyzeOSDs",
+    "LotusGuild/tinker_tickets"
+  ],
+  "onboarding": false,
+  "requireConfig": "optional",
+  "automerge": false,
+  "labels": ["dependencies"],
+  "prHourlyLimit": 5,
+  "prConcurrentLimit": 10,
+  "schedule": ["before 6am on Monday"],
+  "packageRules": [
+    {
+      "matchDepTypes": ["devDependencies"],
+      "automerge": true,
+      "automergeType": "pr",
+      "automergeStrategy": "squash"
+    },
+    {
+      "matchUpdateTypes": ["patch"],
+      "automerge": true,
+      "automergeType": "pr",
+      "automergeStrategy": "squash"
+    }
+  ]
+}