From 1465a19ce2d7eeb1cbc6a8a1709518243e160005 Mon Sep 17 00:00:00 2001
From: Roel de Cort <63876068+dc-tec@users.noreply.github.com>
Date: Fri, 21 Jun 2024 14:55:59 +0200
Subject: [PATCH] feat: configure nix update and renovate pipeline (#6)

Create pipelines to run Renovate and Nix Flake lock updates.
---
 .github/workflows/renovate.yaml     | 16 ++++++++++++++++
 .github/workflows/update-flake.yaml | 22 ++++++++++++++++++++++
 renovate.json5                      |  8 ++++++++
 3 files changed, 46 insertions(+)
 create mode 100644 .github/workflows/renovate.yaml
 create mode 100644 .github/workflows/update-flake.yaml
 create mode 100644 renovate.json5

diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
new file mode 100644
index 0000000..74323fa
--- /dev/null
+++ b/.github/workflows/renovate.yaml
@@ -0,0 +1,16 @@
+on:
+  schedule:
+    - cron: "30 00 * * 0"
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+      - name: Renovate
+        uses: renovatebot/github-action@v40.1.12
+        with:
+          configurationFile: renovate.json5
+          renovate-version: full
+          token: ${{ secrets.RENOVATE_TOKEN }}
diff --git a/.github/workflows/update-flake.yaml b/.github/workflows/update-flake.yaml
new file mode 100644
index 0000000..bc425e5
--- /dev/null
+++ b/.github/workflows/update-flake.yaml
@@ -0,0 +1,22 @@
+on:
+  schedule:
+    - cron: "30 00 * * 1"
+
+jobs:
+  lockfile:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Repository Checkout
+        uses: actions/checkout@v4
+
+      - name: Instal Nix
+        uses: DeterminateSystems/nix-installer-action@v1
+
+      - name: Update flake.lock
+        uses: DeterminateSystems/update-flake-lock@v22
+        with:
+          nix-options: --debug --log-format raw
+          pr-title: "deps: update flake.lock"
+          pr-labels: |
+            dependencies
+            automated
diff --git a/renovate.json5 b/renovate.json5
new file mode 100644
index 0000000..59bcec9
--- /dev/null
+++ b/renovate.json5
@@ -0,0 +1,8 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "platform": "github",
+  "semanticCommits": true,
+  "labels": ["renovate"],
+  "repositories": ["dc-tec/k8s-gitops"],
+  "extends": ["config:recommended"],
+}