Run Renovate #392
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright (C) 2023 TomTom NV. All rights reserved. | |
| name: Run Renovate | |
| on: | |
| workflow_dispatch: | |
| schedule: | |
| - cron: '5 0 * * *' # at 00:05 am every day | |
| # clear out default permissions | |
| permissions: {} | |
| jobs: | |
| renovate: | |
| runs-on: macos-latest | |
| timeout-minutes: 10 | |
| permissions: | |
| contents: read | |
| id-token: write | |
| env: | |
| CP_HOME_DIR: "~" | |
| BUNDLE_GEMFILE: 'CocoaPods/Gemfile' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Setup Ruby | |
| uses: ruby/setup-ruby@v1 | |
| # Install dependencies manually in order to preserve context for renovate post upgrade tasks | |
| - name: Install bundle dependencies | |
| run: bundle install | |
| - name: Install renovate npm package | |
| run: npm install renovate | |
| - name: Configure Artifactory access | |
| run: | | |
| echo "machine repositories.tomtom.com" > ~/.netrc | |
| echo "login ${{ secrets.ARTIFACTORY_USERNAME }}" >> ~/.netrc | |
| echo "password ${{ secrets.ARTIFACTORY_PASSWORD }}" >> ~/.netrc | |
| - name: Add Cocoapods repository | |
| # Ensure we have repos dir created | |
| # Workaround for https://github.com/jfrog/cocoapods-art/issues/32 | |
| run: | | |
| mkdir -p ~/.cocoapods/repos | |
| bundle exec pod repo-art add tomtom-sdk-cocoapods https://repositories.tomtom.com/artifactory/api/pods/cocoapods | |
| - name: Generate app token | |
| uses: tibdex/github-app-token@b62528385c34dbc9f38e5f4225ac829252d1ea92 # v1.8.0 | |
| id: generate-token | |
| with: | |
| app_id: ${{ secrets.TOMTOM_SDK_INTEGRATION_APP_ID}} | |
| private_key: ${{ secrets.TOMTOM_SDK_INTEGRATION_PRIVATE_KEY }} | |
| - name: Run renovate | |
| env: | |
| LOG_LEVEL: debug | |
| RENOVATE_CONFIG_FILE: .github/renovate-config.js | |
| RENOVATE_TARGET_REPOSITORY: ${{ github.repository }} | |
| RENOVATE_ARTIFACTORY_USERNAME: ${{ secrets.ARTIFACTORY_USERNAME }} | |
| RENOVATE_ARTIFACTORY_PASSWORD: ${{ secrets.ARTIFACTORY_PASSWORD }} | |
| RENOVATE_TOKEN: ${{ steps.generate-token.outputs.token }} | |
| run: npx renovate | |
| - name: Clear .netrc file | |
| if: always() | |
| run: echo -n > ~/.netrc |