Renovate #3450

	---
	# yaml-language-server: $schema=https://json.schemastore.org/github-workflow
	name: Renovate

	on:
	# push:
	# branches:
	# - main
	# paths:
	# - .renovaterc.json5
	# - .renovate/**.json5
	schedule:
	- cron: 0 * * * *
	workflow_dispatch:
	inputs:
	dryRun:
	description: Dry Run
	type: boolean
	default: false
	required: true
	logLevel:
	description: Log Level
	type: choice
	default: debug
	options:
	- debug
	- info
	required: true
	version:
	description: Renovate Version
	default: latest
	required: true

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.number \|\| github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	main:
	name: Renovate
	runs-on: home-ops-runner
	permissions:
	packages: read
	steps:
	- name: Generate Token
	uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
	id: app-token
	with:
	app-id: ${{ secrets.BOT_APP_ID }}
	private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }}

	- name: Checkout
	uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
	with:
	persist-credentials: false
	token: ${{ steps.app-token.outputs.token }}

	- name: Run Renovate
	uses: renovatebot/github-action@f7fad228a053c69a98e24f8e4f6cf40db8f61e08 # v44.2.1
	env:
	LOG_LEVEL: ${{ inputs.logLevel \|\| 'debug' }}
	RENOVATE_AUTODISCOVER: true
	RENOVATE_AUTODISCOVER_FILTER: ${{ github.repository }}
	RENOVATE_DRY_RUN: ${{ inputs.dryRun }}
	RENOVATE_INTERNAL_CHECKS_FILTER: strict
	RENOVATE_PLATFORM: github
	RENOVATE_PLATFORM_COMMIT: enabled
	with:
	token: ${{ steps.app-token.outputs.token }}
	renovate-version: ${{ inputs.version \|\| 'latest' }}

Provide feedback