name: renovate

on:
  push:
    branches:
      - main
  workflow_dispatch:
  schedule:
    - cron: "0 */3 * * *"

jobs:
  renovate:
    runs-on: docker
    container: ghcr.io/renovatebot/renovate:38.140.1
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Validate config
        run: |
          renovate-config-validator

      - name: Self-hosted Renovate
        run: |
          renovate
        env:
          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
          GITHUB_COM_TOKEN: ${{ secrets.PERSONAL_TOKEN_GITHUB }}