Skip to content

Conversation

@AlexanderBarabanov
Copy link
Contributor

What does this PR do?

This PR adds renovate.yml and renovate-config-validator.yml workflows and configuration renovate.json5 to run Renovate as a GitHub Action.
Workflow renovate.yml will run daily and open PRs with suggested security and version upgrades (weekly and monthly).
Instead of using a Personal Access Token (PAT) that is tied to a particular user / faceless account this workflow uses private GitHub App with tuned permissions.
renovate-config-validator.yml workflow will validate changes in renovate.json5.
Dependabot configuration is removed.

Expected behavior - https://github.com/AlexanderBarabanov/model_api/pulls

In addition, Zizmor severity-level and confidence-level are set LOW on pre-commit checks, addressed some low Zizmor findings.

Fixes # (issue)

Before submitting

  • This PR fixes a typo or improves the docs (you can dismiss the other checks if that's the case).
  • Did you make sure to update the documentation with your changes?
  • Did you write any new necessary tests?

Signed-off-by: Barabanov <[email protected]>
Signed-off-by: Barabanov <[email protected]>
Signed-off-by: Barabanov <[email protected]>
Signed-off-by: Barabanov <[email protected]>
Signed-off-by: Barabanov <[email protected]>
Signed-off-by: Barabanov <[email protected]>
Signed-off-by: Barabanov <[email protected]>
Signed-off-by: Barabanov <[email protected]>
@AlexanderBarabanov AlexanderBarabanov requested a review from a team as a code owner August 20, 2025 14:13
@github-actions github-actions bot added the build Related to build scripts label Aug 20, 2025
Signed-off-by: Barabanov <[email protected]>
@github-actions github-actions bot added the docs Related to documentation label Aug 20, 2025
@tybulewicz tybulewicz added this pull request to the merge queue Aug 21, 2025
@AlexanderBarabanov AlexanderBarabanov removed this pull request from the merge queue due to a manual request Aug 21, 2025
@AlexanderBarabanov AlexanderBarabanov added this pull request to the merge queue Aug 21, 2025
Merged via the queue into open-edge-platform:master with commit 2e0b8ca Aug 21, 2025
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build Related to build scripts docs Related to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants