Renovate #12649

	---
	name: "Renovate"

	on:
	workflow_dispatch:
	inputs:
	dryRun:
	description: Dry-Run
	default: "false"
	required: false
	logLevel:
	description: Log-Level
	default: debug
	required: false
	schedule:
	- cron: "0 * * * *"
	push:
	branches: ["main"]
	paths:
	- .github/renovate.json5
	- .github/renovate/**.json5

	env:
	LOG_LEVEL: debug
	RENOVATE_DRY_RUN: false
	RENOVATE_CONFIG_FILE: .github/renovate.json5

	jobs:
	renovate:
	name: Renovate
	runs-on: ubuntu-latest
	steps:
	- name: Generate Token
	uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
	id: generate-token
	with:
	app_id: "${{ secrets.BOT_APP_ID }}"
	private_key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"

	- name: Checkout
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	token: "${{ steps.generate-token.outputs.token }}"

	- name: Override default config from dispatch variables
	shell: bash
	run: \|
	echo "RENOVATE_DRY_RUN=${{ github.event.inputs.dryRun \|\| env.RENOVATE_DRY_RUN }}" >> "${GITHUB_ENV}"
	echo "LOG_LEVEL=${{ github.event.inputs.logLevel \|\| env.LOG_LEVEL }}" >> "${GITHUB_ENV}"

	- name: Renovate
	uses: renovatebot/github-action@0984fb80fc633b17e57f3e8b6c007fe0dc3e0d62 # v40.3.6
	with:
	configurationFile: "${{ env.RENOVATE_CONFIG_FILE }}"
	token: "${{ steps.generate-token.outputs.token }}"

Provide feedback