name: Renovate
run-name: Renovate — Dependency Updates

on:
  # Run on a schedule (every 6 hours) to discover new updates.
  schedule:
    - cron: "0 */6 * * *"
  # Allow manual runs for testing or forcing an update check.
  workflow_dispatch:

# Only one Renovate run at a time.
concurrency:
  group: renovate
  cancel-in-progress: false

jobs:
  renovate:
    name: Renovate
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      # Go is required for postUpgradeTasks (go generate runs templ + sqlc).
      - uses: actions/setup-go@v6
        with:
          go-version: "1.26"

      - name: Run Renovate
        uses: renovatebot/github-action@v46.1.0
        with:
          configurationFile: renovate.json5
          token: ${{ secrets.RENOVATE_TOKEN }}
        env:
          LOG_LEVEL: info
          RENOVATE_REPOSITORIES: ${{ github.repository }}
          RENOVATE_GIT_AUTHOR: "onion-4-dinner <15676555+onion-4-dinner@users.noreply.github.com>"
          # Whitelist postUpgradeTasks commands defined in renovate.json5.
          RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS: '["^go generate \\./\\.\\.\\.$$"]'