k3k/.github/workflows/renovate-vault.yml

name: Renovate
on:
  workflow_dispatch:
    inputs:
      logLevel:
        description: "Override default log level"
        required: false
        default: info
        type: choice
        options:
        - info
        - debug
      overrideSchedule:
        description: "Override all schedules"
        required: false
        default: "false"
        type: choice
        options:
        - "false"
        - "true"
      configMigration:
        description: "Toggle PRs for config migration"
        required: false
        default: "true"
        type: choice
        options:
        - "false"
        - "true"
      renovateConfig:
        description: "Define a custom renovate config file"
        required: false
        default: ".github/renovate.json"
        type: string
      minimumReleaseAge:
        description: "Override minimumReleaseAge for a one-time run (e.g., '0 days' to disable delay)"
        required: false
        default: "null"
        type: string
      extendsPreset:
        description: "Override renovate extends preset (default: 'github>rancher/renovate-config#release')."
        required: false
        default: "github>rancher/renovate-config#release"
        type: string

  schedule:
  - cron: '30 4,6 * * 1-5'

permissions:
  contents: read
  id-token: write

jobs:
  call-workflow:
    uses: rancher/renovate-config/.github/workflows/renovate-vault.yml@8a3b60a6ce88b4929fc4cb918f06dc5a503c3ab9 # release
    with:
      configMigration: ${{ inputs.configMigration || 'true' }}
      logLevel: ${{ inputs.logLevel || 'info' }}
      overrideSchedule: ${{ github.event.inputs.overrideSchedule == 'true' && '{''schedule'':null}' || '' }}
      renovateConfig: ${{ inputs.renovateConfig || '.github/renovate.json' }}
      minimumReleaseAge: ${{ inputs.minimumReleaseAge || 'null' }}
      extendsPreset: ${{ inputs.extendsPreset || 'github>rancher/renovate-config#release' }}
    secrets:
      override-token: "${{ secrets.RENOVATE_FORK_GH_TOKEN || '' }}"