From 01e086a9c6710fe0613b8ff2049ecdd78838b451 Mon Sep 17 00:00:00 2001 From: Val Redchenko Date: Thu, 28 May 2026 12:58:20 +0100 Subject: [PATCH 1/2] chore: restore self-hosted Renovate workflow The org-wide Mend.io Renovate GitHub App has not been reliably processing this repo since late April. Restore the self-hosted workflow originally added in the Dependabot -> Renovate migration and dropped in smartem-devtools#182. Schedule is twice daily plus workflow_dispatch; renovate.json is unchanged and continues to drive configuration via the shared preset. Requires RENOVATE_TOKEN secret to be set. --- .github/workflows/renovate.yml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .github/workflows/renovate.yml diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml new file mode 100644 index 0000000..33f6ebb --- /dev/null +++ b/.github/workflows/renovate.yml @@ -0,0 +1,21 @@ +name: Renovate + +on: + schedule: + - cron: "0 4,16 * * *" + workflow_dispatch: + +permissions: + contents: write + pull-requests: write + issues: write + +jobs: + renovate: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v6 + - uses: renovatebot/github-action@v46.1.14 + with: + token: ${{ secrets.RENOVATE_TOKEN }} + configurationFile: renovate.json From 748183b40049a21bbd9a078756b424929b500544 Mon Sep 17 00:00:00 2001 From: Val Redchenko Date: Mon, 22 Jun 2026 23:43:58 +0100 Subject: [PATCH 2/2] chore: run Renovate with GITHUB_TOKEN instead of a PAT Use the auto-provided GITHUB_TOKEN (no RENOVATE_TOKEN secret to create or rotate) and scope the run to this repo explicitly, since GITHUB_TOKEN can't autodiscover. Known trade-off: Renovate's PRs don't trigger this repo's other workflows until re-run; switch to a GitHub App token if that becomes a problem. --- .github/workflows/renovate.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index 33f6ebb..48bec48 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -15,7 +15,13 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v6 + # Run against this repo only, using the auto-provided GITHUB_TOKEN (no PAT to manage). + # GITHUB_TOKEN can't autodiscover, so the target repo is set explicitly. Trade-off: PRs that + # Renovate opens with GITHUB_TOKEN do not trigger this repo's other workflows, so dependency + # PRs arrive without CI until manually re-run. Swap to a GitHub App token if that becomes a pain. - uses: renovatebot/github-action@v46.1.14 + env: + RENOVATE_REPOSITORIES: ${{ github.repository }} with: - token: ${{ secrets.RENOVATE_TOKEN }} + token: ${{ secrets.GITHUB_TOKEN }} configurationFile: renovate.json