Skip to content

Standardize Renovate configuration#43

Merged
KCeh merged 1 commit into
mainfrom
setup/renovate
Jul 6, 2026
Merged

Standardize Renovate configuration#43
KCeh merged 1 commit into
mainfrom
setup/renovate

Conversation

@antunflas

Copy link
Copy Markdown
Member

Summary

Adopt the shared Renovate setup used across Infinum Android repos:

  • renovate.json extends the central infinum/android-renovate-config preset (no per-repo rules to maintain).
  • .github/workflows/renovate.yml runs Renovate on a schedule, authenticated with the Renovate GitHub App (not a PAT or the default GITHUB_TOKEN).
  • Hardened: permissions: {} zeroes the default token, the Renovate action is pinned to a full commit SHA, and RENOVATE_REPOSITORIES scopes the run to this repo only.

Prerequisites

The workflow requires, on this repo / org:

  • Variable RENOVATE_APP_ID
  • Secret RENOVATE_APP_PRIVATE_KEY
  • The Renovate GitHub App installed on this repo and on android-renovate-config (private preset repo).

Testing

  • Trigger the workflow manually via Actions → Renovate → Run workflow (workflow_dispatch) and confirm the App token step succeeds and Renovate opens its onboarding/dependency PRs.

@sonarqubecloud

Copy link
Copy Markdown

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Standardizes this repository’s Renovate setup by adopting the shared Infinum Android Renovate preset and introducing a scheduled GitHub Actions workflow to run Renovate using a GitHub App token.

Changes:

  • Added renovate.json extending the shared infinum/android-renovate-config preset and setting default reviewers.
  • Added a scheduled/manual .github/workflows/renovate.yml that generates a GitHub App installation token and runs Renovate scoped to this repository.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
renovate.json Adds Renovate configuration extending the shared preset and sets per-repo reviewers.
.github/workflows/renovate.yml Adds a scheduled Renovate workflow using a GitHub App token and a pinned Renovate action SHA.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +18 to +20
- name: Get GitHub App token
id: app_token
uses: actions/create-github-app-token@v2
Comment thread renovate.json
Comment on lines +6 to +9
"reviewers": [
"KCeh",
"antunflas"
]
@KCeh
KCeh merged commit 0affcd0 into main Jul 6, 2026
3 checks passed
@KCeh
KCeh deleted the setup/renovate branch July 6, 2026 10:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants