Skip to content

ci: fix self-hosted Renovate artifact-update execution - #185

Merged
lurtz merged 2 commits into
mainfrom
copilot/fix-artifact-update-problem
Oct 29, 2026
Merged

lurtz merged 2 commits into
mainfrom
copilot/fix-artifact-update-problem

Conversation

Copilot AI commented Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

Renovate PRs report blocked post-upgrade scripts, leaving lockfile artifacts incomplete. The self-hosted workflow already loads an allowlist but exits with “No repositories found.”

  • Repository targeting: Set RENOVATE_REPOSITORIES to ${{ github.repository }} so the configured runner processes this repository.
  • Command permissions: Anchor and escape allowlist patterns to permit only the digest-refresh and README-sync scripts.
  • Manual retries: Enable Renovate on workflow_dispatch alongside scheduled runs.

Copilot AI linked an issue Oct 29, 2026 that may be closed by this pull request
Co-authored-by: lurtz <727209+lurtz@users.noreply.github.com>
Copilot AI changed the title [WIP] Fix Renovate artifact update problem Fix self-hosted Renovate artifact-update execution Oct 29, 2026
Copilot AI requested a review from lurtz October 29, 2026 12:48
@lurtz
lurtz requested a balanced review from Copilot October 29, 2026 13:11
@lurtz lurtz changed the title Fix self-hosted Renovate artifact-update execution chore: fix self-hosted Renovate artifact-update execution Oct 29, 2026
@lurtz lurtz changed the title chore: fix self-hosted Renovate artifact-update execution ci: fix self-hosted Renovate artifact-update execution Oct 29, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues block the Renovate workflow changes.

No open issues 🎉

What changed in this PR

Updates the self-hosted Renovate workflow to address the execution blockers behind incomplete artifact updates reported in #184.

Changes:

  • Targets the current repository explicitly with RENOVATE_REPOSITORIES.
  • Anchors and escapes command allowlist patterns to permit only the digest-refresh and README-sync scripts.
  • Enables Renovate on manual workflow runs as well as scheduled runs.
File Description
.github/​workflows/​daily.yml Configures repository targeting, tightens script permissions, and enables manual Renovate runs.

Review effort: Balanced

@lurtz
lurtz marked this pull request as ready for review October 29, 2026 13:18
@lurtz
lurtz requested a review from opajonk as a code owner October 29, 2026 13:18
@lurtz
lurtz enabled auto-merge October 29, 2026 13:18
@lurtz
lurtz disabled auto-merge October 29, 2026 14:06
@lurtz
lurtz added this pull request to the merge queue Oct 29, 2026
Merged via the queue into main with commit 6cd9eeb Oct 29, 2026
17 of 21 checks passed
@lurtz
lurtz deleted the copilot/fix-artifact-update-problem branch October 29, 2026 14:35
@github-actions

github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown

🎉 This PR is included in version 1.11.4 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Renovate Artifact update problem

4 participants