Add renovate bot
What does this merge request do and why?
Follow the steps laid out in https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/renovate-bot.md to enable dependency update with Renovate.
-
Ensure that a validateandrenovate_botstages exists in your.gitlab-ci.ymlconfiguration -
Create a Project Access Token with apiandwrite_repositoryscope and make it available in your CI environment via theRENOVATE_GITLAB_TOKENenvironment variable through the CI/CD Variables settings. Make sure the variable is Protected and Masked. - Lookup the GitHub Personal Access token from 1Password Production Vault and save it into the CI environment variable
RENOVATE_GITHUB_TOKEN. Make sure the variable is Protected and Masked. - I can't find this🤔 . - Note that you can use Group Access Tokens and Group CI/CD variables, instead of Project-level ones should you choose.
-
Create a CI Pipeline Schedule called Renovatebotwith a daily schedule, eg0 1 * * *. Ensure that the CI Pipeline schedule includes a variable,RENOVATE_SCHEDULEDwith a value of1. -
Note that Renovate Bot will only run on gitlab.com. For projects that are mirrored to other GitLab instances, the task will not run. -
Create a renovate.jsonfile in the root of the project.
How to set up and validate locally
Numbered steps to set up and validate the change are strongly suggested.
Merge request checklist
-
Tests added for new functionality. If not, please raise an issue to follow up. -
Documentation added/updated, if needed.
Closes #238 (closed)
Edited by Tan Le