Skip to content

Standardize Renovate configuration#81

Open
antunflas wants to merge 1 commit into
masterfrom
setup/renovate
Open

Standardize Renovate configuration#81
antunflas wants to merge 1 commit into
masterfrom
setup/renovate

Conversation

@antunflas
Copy link
Copy Markdown
Member

Summary

Adopt the shared Renovate setup used across Infinum Android repos:

  • renovate.json extends the central infinum/android-renovate-config preset (no per-repo rules to maintain).
  • .github/workflows/renovate.yml runs Renovate on a schedule, authenticated with the Renovate GitHub App (not a PAT or the default GITHUB_TOKEN).
  • Hardened: permissions: {} zeroes the default token, the Renovate action is pinned to a full commit SHA, and RENOVATE_REPOSITORIES scopes the run to this repo only.

Prerequisites

The workflow requires, on this repo / org:

  • Variable RENOVATE_APP_ID
  • Secret RENOVATE_APP_PRIVATE_KEY
  • The Renovate GitHub App installed on this repo and on android-renovate-config (private preset repo).

Testing

  • Trigger the workflow manually via Actions → Renovate → Run workflow (workflow_dispatch) and confirm the App token step succeeds and Renovate opens its onboarding/dependency PRs.

@sonarqubecloud
Copy link
Copy Markdown

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR standardizes Renovate adoption for the repository by adding a minimal Renovate config that extends Infinum’s shared preset and introducing a scheduled GitHub Actions workflow that runs Renovate using a GitHub App token.

Changes:

  • Add renovate.json extending infinum/android-renovate-config (and specifying default reviewers).
  • Add .github/workflows/renovate.yml to run Renovate on a twice-monthly schedule (and via manual dispatch) using a GitHub App token with default GITHUB_TOKEN permissions zeroed.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
renovate.json Adds Renovate configuration extending the shared Infinum preset (and defines repo-specific reviewers).
.github/workflows/renovate.yml Adds a scheduled/manual Renovate workflow using GitHub App auth and scoping execution to this repository.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread renovate.json
Comment on lines +5 to +9
],
"reviewers": [
"thisAAY",
"andronicus-kim"
]
Comment on lines +18 to +22
- name: Get GitHub App token
id: app_token
uses: actions/create-github-app-token@v2
with:
app-id: ${{ vars.RENOVATE_APP_ID }}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants