Standardize Renovate configuration#10
Merged
Merged
Conversation
There was a problem hiding this comment.
Pull request overview
This PR standardizes Renovate setup for the repository by introducing a minimal renovate.json that extends the shared Infinum Android preset and adding a scheduled GitHub Actions workflow that runs Renovate using a GitHub App token.
Changes:
- Add
renovate.jsonextendinggithub>infinum/android-renovate-configand configuring default PR reviewers. - Add
.github/workflows/renovate.ymlto run Renovate on a schedule and via manual dispatch using a GitHub App installation token. - Harden the workflow by zeroing default
GITHUB_TOKENpermissions and pinning the Renovate action to a full commit SHA.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
renovate.json |
Adds Renovate configuration extending the shared preset and sets repo-level reviewers. |
.github/workflows/renovate.yml |
Adds a scheduled/manual Renovate workflow using a GitHub App token and scoped repository execution. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
+18
to
+23
| - name: Get GitHub App token | ||
| id: app_token | ||
| uses: actions/create-github-app-token@v2 | ||
| with: | ||
| app-id: ${{ vars.RENOVATE_APP_ID }} | ||
| private-key: ${{ secrets.RENOVATE_APP_PRIVATE_KEY }} |
Comment on lines
+3
to
+7
| "extends": [ | ||
| "github>infinum/android-renovate-config" | ||
| ], | ||
| "reviewers": [ | ||
| "terezijaumiljanovic", |
JonatanPlesko
approved these changes
Jun 1, 2026
KCeh
approved these changes
Jun 1, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adopt the shared Renovate setup used across Infinum Android repos:
renovate.jsonextends the centralinfinum/android-renovate-configpreset (no per-repo rules to maintain)..github/workflows/renovate.ymlruns Renovate on a schedule, authenticated with the Renovate GitHub App (not a PAT or the defaultGITHUB_TOKEN).permissions: {}zeroes the default token, the Renovate action is pinned to a full commit SHA, andRENOVATE_REPOSITORIESscopes the run to this repo only.Prerequisites
The workflow requires, on this repo / org:
RENOVATE_APP_IDRENOVATE_APP_PRIVATE_KEYandroid-renovate-config(private preset repo).Testing
workflow_dispatch) and confirm the App token step succeeds and Renovate opens its onboarding/dependency PRs.