name: Renovate
on:
  schedule:
    # Every day at 03:00 JST (18:00 UTC on the previous day).
    - cron: "0 18 * * *"
  workflow_dispatch:
permissions:
  contents: read
concurrency:
  group: renovate
  cancel-in-progress: false
jobs:
  renovate:
    name: Update Nix flake inputs
    runs-on: ubuntu-latest
    timeout-minutes: 60
    steps:
      - name: Checkout repository
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          persist-credentials: false
      # Use a PAT or GitHub App token so Renovate PRs trigger the other workflows.
      - name: Run Renovate
        uses: renovatebot/github-action@22e0a16091fc706b04affe6ae53d5e3358ac4023 # v46.1.19
        with:
          renovate-version: 43.262.1
          token: ${{ secrets.RENOVATE_TOKEN }}
        env:
          LOG_LEVEL: info
          RENOVATE_PLATFORM: github
          RENOVATE_REPOSITORIES: ${{ github.repository }}