renovate.yml

name: Renovate
on:
  workflow_dispatch:
    inputs:
      apps:
        description: JSON array of app name(s) to renovate (re-pull their image and recreate their containers) wherever each is currently deployed, e.g. ["traefik","rybbit"]. Leave empty to renovate every app on every target.
        type: string
        required: false
        default: "[]"
  schedule:
    - cron: "0 3 * * *"
jobs:
  load-targets:
    runs-on: ubuntu-latest
    outputs:
      matrix: ${{ steps.load-targets.outputs.matrix }}
      count: ${{ steps.load-targets.outputs.count }}
    steps:
      - uses: actions/checkout@v7
      - uses: $/.github/actions/load-targets-matrix
        id: load-targets
  renovate:
    needs: load-targets
    if: needs.load-targets.outputs.count != '0'
    strategy:
      matrix: ${{ fromJson(needs.load-targets.outputs.matrix) }}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - uses: $/.github/actions/renovate
        id: renovate
        with:
          apps: ${{ inputs.apps || '[]' }}
          target-manifest: ${{ matrix.manifest }}
          ssh-private-key: ${{ secrets[matrix.ssh_private_key_secret] }}
          github-token: ${{ secrets.GITHUB_TOKEN }}
          tailscale-oauth-client-id: ${{ vars.TAILSCALE_OAUTH_CLIENT_ID }}
          tailscale-oauth-secret: ${{ secrets.TAILSCALE_OAUTH_SECRET }}
      - name: Notify Telegram
        if: steps.renovate.outputs.updated == 'true'
        uses: rubykatzen/baseline/.github/actions/send-telegram-message@v0.19.0
        with:
          message: ${{ steps.renovate.outputs.telegram-message }}
          telegram-bot-token: ${{ secrets.TELEGRAM_BOT_TOKEN }}
          telegram-chat-id: ${{ vars.TELEGRAM_CHAT_ID }}
          parse-mode: MarkdownV2