Renovate #41

	name: Renovate
	on:
	# Allows manual/automated trigger for debugging purposes
	workflow_dispatch:
	inputs:
	logLevel:
	description: "Renovate's log level"
	required: true
	default: "info"
	type: string
	schedule:
	- cron: '0 8 * * *'

	env:
	LOG_LEVEL: "info"

	jobs:
	renovate:
	runs-on: ubuntu-latest
	if: \|
	!github.event.repository.fork &&
	!github.event.pull_request.head.repo.fork
	steps:
	- name: Checkout
	uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
	with:
	submodules: true

	# Don't waste time starting Renovate if JSON is invalid
	- name: Validate Renovate JSON
	run: npx --yes --package renovate -- renovate-config-validator

	- name: Get token
	id: get-github-app-token
	uses: actions/create-github-app-token@7bfa3a4717ef143a604ee0a99d859b8886a96d00 # v1
	with:
	app-id: ${{ secrets.RENOVATE_GITHUB_APP_ID }}
	private-key: ${{ secrets.RENOVATE_GITHUB_APP_PRIVATE_KEY }}

	- name: Self-hosted Renovate
	uses: renovatebot/github-action@2e021d24483d81e77e0e902d0809adfbfff276fc # v40.1.10
	env:
	RENOVATE_REPOSITORIES: ${{ github.repository }}
	# Use GitHub API to create commits
	RENOVATE_PLATFORM_COMMIT: "true"
	LOG_LEVEL: ${{ github.event.inputs.logLevel \|\| env.LOG_LEVEL }}
	RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS: '["^git submodule update --init$", "^make generate$", "^install-tool golang \\$\$grep -oP \"\\^toolchain go\\\\K\\.\\+\" go\\.mod\$$", "^make go.lint$"]'
	with:
	configurationFile: .github/renovate.json5
	token: '${{ steps.get-github-app-token.outputs.token }}'

Provide feedback