fix(ci): replace JS-based Renovate action with direct container invocation #73

Merged
sarman merged 1 commits from fix/renovate-no-node-runner into master 2026-06-07 01:59:47 +00:00
Owner

The runner environment does not have Node.js in PATH, causing
actions/checkout@v4 and renovatebot/github-action@v41.0.0 (both JS
actions) to fail at startup.

Use renovate/renovate:latest as the job container and invoke the
renovate binary directly via run:, consistent with how all other
workflows in this repo handle checkout and tooling. The Checkout step
was also unnecessary — Renovate manages its own git operations.

The runner environment does not have Node.js in PATH, causing actions/checkout@v4 and renovatebot/github-action@v41.0.0 (both JS actions) to fail at startup. Use renovate/renovate:latest as the job container and invoke the renovate binary directly via run:, consistent with how all other workflows in this repo handle checkout and tooling. The Checkout step was also unnecessary — Renovate manages its own git operations.
sarman added 1 commit 2026-06-07 01:49:30 +00:00
fix(ci): replace JS-based Renovate action with direct container invocation
Some checks failed
PR Review Automation / review (pull_request) Successful in 2m55s
Test / frontend-typecheck (pull_request) Successful in 1m38s
Test / frontend-tests (pull_request) Successful in 1m39s
Test / rust-tests (pull_request) Has been cancelled
Test / rust-fmt-check (pull_request) Has been cancelled
Test / rust-clippy (pull_request) Has been cancelled
30d6e73226
The runner environment does not have Node.js in PATH, causing
actions/checkout@v4 and renovatebot/github-action@v41.0.0 (both JS
actions) to fail at startup.

Use renovate/renovate:latest as the job container and invoke the
renovate binary directly via run:, consistent with how all other
workflows in this repo handle checkout and tooling. The Checkout step
was also unnecessary — Renovate manages its own git operations.
sarman reviewed 2026-06-07 01:52:24 +00:00
sarman left a comment
Author
Owner

Automated PR Review (qwen3-coder-next via liteLLM):\n\nSummary
The PR replaces a JS-based Renovate GitHub Action with direct invocation of the official Renovate container image. The updated workflow runs Renovate directly inside a container without requiring Node.js setup or JS-based actions, improving simplicity and maintainability. No issues affecting correctness, security, or functionality were identified.

Findings

  • [SUGGESTION] .gitea/workflows/renovate.yaml:17 - Using renovate/renovate:latest may lead to unpredictable behavior due to lack of pinning.
    Evidence: image: renovate/renovate:latest
    Fix: Pin to a specific tag (e.g., renovate/renovate:39.188.3) for reproducibility and stability.

Verdict: APPROVE WITH COMMENTS

Automated PR Review (qwen3-coder-next via liteLLM):\n\n**Summary** The PR replaces a JS-based Renovate GitHub Action with direct invocation of the official Renovate container image. The updated workflow runs Renovate directly inside a container without requiring Node.js setup or JS-based actions, improving simplicity and maintainability. No issues affecting correctness, security, or functionality were identified. **Findings** - [SUGGESTION] .gitea/workflows/renovate.yaml:17 - Using `renovate/renovate:latest` may lead to unpredictable behavior due to lack of pinning. Evidence: `image: renovate/renovate:latest` Fix: Pin to a specific tag (e.g., `renovate/renovate:39.188.3`) for reproducibility and stability. **Verdict**: APPROVE WITH COMMENTS
sarman merged commit 314fc0d1ba into master 2026-06-07 01:59:47 +00:00
sarman deleted branch fix/renovate-no-node-runner 2026-06-07 01:59:48 +00:00
Sign in to join this conversation.
No reviewers
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: sarman/tftsr-devops_investigation#73
No description provided.