name: Renovate
on:
  schedule:
    - cron: "0 5 * * *" # Every day at 05:00 UTC
  workflow_dispatch: # Manual trigger

jobs:
  renovate:
    runs-on: shell
    steps:
      - name: Self-hosted Renovate
        run: |
          set -e

          # Ensure cache dir exists before Docker starts
          mkdir -p /var/tmp/renovate-cache

          docker run --rm \
            --user "$(id -u):$(id -g)" \
            -e RENOVATE_TOKEN="${{ secrets.RENOVATE_TOKEN }}" \
            -e RENOVATE_AUTODISCOVER=false \
            -e RENOVATE_REPOSITORIES="${{ gitea.repository }}" \
            -e RENOVATE_ONBOARDING=false \
            -e LOG_LEVEL=info \
            -v /var/tmp/renovate-cache:/tmp/renovate-cache \
            ghcr.io/renovatebot/renovate:latest