initialisation of renovate tools for tbc

stages:

  - build

  - test

variables:

  RENOVATE_IMAGE: "renovate/renovate:slim"

  RENOVATE_BASE_DIR: $CI_PROJECT_DIR/renovate

  RENOVATE_ENDPOINT: $CI_API_V4_URL

  RENOVATE_LOG_FILE: renovate-log.ndjson

  RENOVATE_AUTODISCOVER_FILTER: '${CI_PROJECT_ROOT_NAMESPACE}/**'

  RENOVATE_LOG_FILE_LEVEL: debug

  LOG_LEVEL: info

workflow:

  rules:

    # exclude merge requests

    - if: $CI_MERGE_REQUEST_ID

      when: never

    # run the pipeline in other cases

    - when: always

.renovate-base:

  image: $RENOVATE_IMAGE

  # Cache downloaded dependencies and plugins between builds.

  # To keep cache across branches add 'key: "$CI_JOB_NAME"'

  # TODO (if necessary): define cache policy here

  cache:

    key: ${CI_COMMIT_REF_SLUG}-renovate

    paths:

      - renovate/cache/renovate/**

# (example) validator job

renovate-validator:

  extends: .renovate-base

  stage: build

  # force no dependency

  dependencies: []

  script:

    - renovate-config-validator

# dependency check job: on manual or schedule (dry-run otherwise)

renovate-depcheck:

  extends: .renovate-base

  stage: test

  # force no dependency

  dependencies: []

  variables:

    # dry-run by default

    RENOVATE_DRY_RUN: "true"

  script:

    - renovate $RENOVATE_EXTRA_FLAGS

  artifacts:

    when: always

    expire_in: 1d

    paths:

      - "$RENOVATE_LOG_FILE"

  rules:

    # not dry run on manual or schedule

    - if: '$CI_PIPELINE_SOURCE == "schedule" || $CI_PIPELINE_SOURCE == "web"'

      variables:

        RENOVATE_DRY_RUN: "false"

    - if: $CI_COMMIT_REF_NAME # useless but prevents GitLab from warning

# renovate

# Renovate for _to be continuous_

Universal dependency update tool used by to-be-conituous to keep all project up to date.

 No newline at end of file

This project takes care of maintaining _to be continuous_ projects dependencies up-to-date with [Renovate](https://docs.renovatebot.com/).

It is configured (on gitlab.com) as a scheduled CI/CD job to regularly scan through all _to be continuous_ projects 

dependencies and automatically detect new released versions and propose upgrading those with simple Merge Requests.

## :warning: for self-managed _to be continuous_

If you're using a synchronised copy of _to be continuous_ in a self-managed GitLab, you should not configure scheduled pipeline for this project.

That should only remain in the master project on gitlab.com.

{

  "platform": "gitlab",

  "dependencyDashboardAutoclose": true,

  "repositoryCache": "enabled",

  "autodiscover": true,

  "extends": [

    "github>whitesource/merge-confidence:beta"

  ],

  "ignorePrAuthor": true

}