name: Renovate

on:
  workflow_call:
    inputs:
      log_level:
        description: "Log level for Renovate (debug, info, warn, error)"
        required: false
        type: string
        default: "info"

jobs:
  renovate:
    runs-on: ubuntu-latest
    container: renovate/renovate:43
    steps:
      - name: Checkout central config
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7

      - name: Run Renovate
        run: renovate
        env:
          RENOVATE_CONFIG_FILE: config.json
          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
          RENOVATE_GITHUB_TOKEN: ${{ secrets.RENOVATE_GITHUB_TOKEN }}
          RENOVATE_REPOSITORIES: ${{ github.repository }}
          RENOVATE_GIT_PRIVATE_KEY: ${{ secrets.RENOVATE_SSH_KEY }}
          LOG_LEVEL: ${{ inputs.log_level }}