name: Renovate
on:
  schedule:
    # Every day at 03:00 JST (18:00 UTC on the previous day).
    - cron: "0 18 * * *"
  workflow_dispatch:
permissions:
  contents: read
concurrency:
  group: renovate
  cancel-in-progress: false
jobs:
  renovate:
    name: Update Nix flake inputs
    runs-on: ubuntu-latest
    timeout-minutes: 60
    steps:
      - name: Checkout repository
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
      # Use a PAT or GitHub App token so Renovate PRs trigger the other workflows.
      - name: Run Renovate
        uses: renovatebot/github-action@3064367f740a1a91cca218698a63902689cce200 # v46.1.20
        with:
          renovate-version: 43.262.1
          token: ${{ secrets.RENOVATE_TOKEN }}
        env:
          LOG_LEVEL: info
          RENOVATE_PLATFORM: github
          RENOVATE_REPOSITORIES: ${{ github.repository }}