mirror of
https://github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin.git
synced 2026-07-19 18:52:20 +02:00
be13c49144
The 2026-07-03 runs surfaced two config problems: - The grouped "renovate/all" branch made Renovate fetch and hold the changelog of every upgrade instance separately (Traefik v3.0.0->v3.7.6 was fetched ~10x, once per compose file), which blew the default 4GB V8 heap: "FATAL ERROR: ... JavaScript heap out of memory" (exit 134), killing the run after the branch was pushed but before the PR was opened. Disable changelog fetching (release notes were truncated in the grouped PR body anyway) and raise the Node heap to 8GB as a safety net. - No gitAuthor was set, so commits were authored as Mend's renovate@whitesourcesoftware.com, which GitHub flags "Unverified" (Vigilant Mode) and Renovate warns about on every run. Use the token owner's noreply address instead. Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
42 lines
1.3 KiB
YAML
42 lines
1.3 KiB
YAML
name: Renovate
|
|
|
|
# Self-hosted Renovate: opens dependency-update PRs on a weekly schedule.
|
|
# Config lives in /renovate.json. Requires a repo/org secret RENOVATE_TOKEN
|
|
# (a PAT with `repo` + `workflow` scope, or a fine-grained token with
|
|
# contents:write + pull-requests:write) so Renovate can push branches and open
|
|
# PRs. Trigger manually from the Actions tab via "Run workflow" to test.
|
|
|
|
on:
|
|
schedule:
|
|
- cron: "0 4 * * 1" # every Monday at 04:00 UTC
|
|
workflow_dispatch:
|
|
inputs:
|
|
logLevel:
|
|
description: "Renovate log level"
|
|
required: false
|
|
default: "info"
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: renovate
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
renovate:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Run Renovate
|
|
uses: renovatebot/github-action@v46.1.14
|
|
with:
|
|
token: ${{ secrets.RENOVATE_TOKEN }}
|
|
env:
|
|
RENOVATE_REPOSITORIES: ${{ github.repository }}
|
|
RENOVATE_ONBOARDING: "false"
|
|
RENOVATE_REQUIRE_CONFIG: "required"
|
|
# The grouped "all" branch holds many upgrades; changelog/PR-body
|
|
# rendering for it blew the default 4GB V8 heap (exit 134 OOM).
|
|
NODE_OPTIONS: "--max-old-space-size=8192"
|
|
LOG_LEVEL: ${{ github.event.inputs.logLevel || 'info' }}
|