Skip to content

Standardize Renovate configuration#10

Merged
antunflas merged 1 commit into
mainfrom
setup/renovate
Jul 6, 2026
Merged

Standardize Renovate configuration#10
antunflas merged 1 commit into
mainfrom
setup/renovate

Conversation

@antunflas

Copy link
Copy Markdown
Member

Summary

Adopt the shared Renovate setup used across Infinum Android repos:

  • renovate.json extends the central infinum/android-renovate-config preset (no per-repo rules to maintain).
  • .github/workflows/renovate.yml runs Renovate on a schedule, authenticated with the Renovate GitHub App (not a PAT or the default GITHUB_TOKEN).
  • Hardened: permissions: {} zeroes the default token, the Renovate action is pinned to a full commit SHA, and RENOVATE_REPOSITORIES scopes the run to this repo only.

Prerequisites

The workflow requires, on this repo / org:

  • Variable RENOVATE_APP_ID
  • Secret RENOVATE_APP_PRIVATE_KEY
  • The Renovate GitHub App installed on this repo and on android-renovate-config (private preset repo).

Testing

  • Trigger the workflow manually via Actions → Renovate → Run workflow (workflow_dispatch) and confirm the App token step succeeds and Renovate opens its onboarding/dependency PRs.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR standardizes Renovate setup for the repository by introducing a minimal renovate.json that extends the shared Infinum Android preset and adding a scheduled GitHub Actions workflow that runs Renovate using a GitHub App token.

Changes:

  • Add renovate.json extending github>infinum/android-renovate-config and configuring default PR reviewers.
  • Add .github/workflows/renovate.yml to run Renovate on a schedule and via manual dispatch using a GitHub App installation token.
  • Harden the workflow by zeroing default GITHUB_TOKEN permissions and pinning the Renovate action to a full commit SHA.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
renovate.json Adds Renovate configuration extending the shared preset and sets repo-level reviewers.
.github/workflows/renovate.yml Adds a scheduled/manual Renovate workflow using a GitHub App token and scoped repository execution.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +18 to +23
- name: Get GitHub App token
id: app_token
uses: actions/create-github-app-token@v2
with:
app-id: ${{ vars.RENOVATE_APP_ID }}
private-key: ${{ secrets.RENOVATE_APP_PRIVATE_KEY }}
Comment thread renovate.json
Comment on lines +3 to +7
"extends": [
"github>infinum/android-renovate-config"
],
"reviewers": [
"terezijaumiljanovic",
@antunflas antunflas merged commit 539b4ac into main Jul 6, 2026
4 checks passed
@antunflas antunflas deleted the setup/renovate branch July 6, 2026 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants