name: Renovater

on:
  schedule:
    - cron: '*/55 * * * *'
  push:
    branches: [main]

jobs:
  renovate:
    runs-on: docker
    container: ghcr.io/renovatebot/renovate:latest@sha256:3ac2022eaf6697cb4f2a8b6465b99f6a10e70bd2d6f9f4c941af3d3635b8cb63
    steps:
      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
      - run: renovate
        env:
          RENOVATE_CONFIG_FILE: "/workspace/watson/renovater/config.js"
          LOG_LEVEL: "warn"
          RENOVATE_TOKEN: ${{ secrets.RENOVATER_TOKEN }}
          GITHUB_COM_TOKEN: ${{ secrets.TOKEN_HUB }}