Github Action 使用介绍

name: Renovate
on:
  schedule:
    # The "*" (#42, asterisk) character has special semantics in YAML, so this
    # string has to be quoted.
    - cron: '0/15 * * * *'
jobs:
  renovate:
    runs-on: ubuntu-latest
    steps:
      - name: Get token
        id: get_token
        uses: actions/create-github-app-token@v1
        with:
          private-key: ${{ secrets.PRIVATE_KEY }}
          app-id: ${{ secrets.APP_ID }}
          owner: ${{ github.repository_owner }}
          # repositories: 'repo1,repo2'

      - name: Checkout
        uses: actions/checkout@v4.1.7

      - name: Self-hosted Renovate
        uses: renovatebot/github-action@v40.1.12
        with:
          configurationFile: example/renovate-config.js
          token: '${{ steps.get_token.outputs.token }}'

name: Renovate
on:
  schedule:
    - cron: "0/15 * * * *"
  workflow_dispatch:

permissions:
  contents: write
  pull-requests: write

jobs:
  renovate:
    runs-on: ubuntu-latest
    steps:
      - name: Get token
        id: get_token
        uses: tibdex/github-app-token@v2
        with:
          app_id: ${{ secrets.JENKINS_DEPENDENCY_UPDATER_APP_ID }}
          private_key: ${{ secrets.JENKINS_DEPENDENCY_UPDATER_PRIVATE_KEY }}

      - name: Checkout
        uses: actions/checkout@v4

      - name: Self-hosted Renovate
        uses: renovatebot/github-action@v40.1.12
        with:
          token: "${{ steps.get_token.outputs.token }}"
          docker-cmd-file: .github/renovate-entrypoint.sh
          docker-user: root
          configurationFile: .github/renovate-config.json5
        env:
          LOG_LEVEL: 'debug'

{
  $schema: "https://docs.renovatebot.com/renovate-schema.json",
  onboarding: false,
  requireConfig: "ignored",
  platform: "github",
  repositories: ["jenkinsci/helm-charts"],
  // eslint-disable-next-line
  allowedPostUpgradeCommands: ['^\.github\/renovate-postupgrade\.sh "{{{depName}}}" "{{{newVersion}}}"$'],
  prConcurrentLimit: 0,
  prHourlyLimit: 5,
  semanticCommits: "enabled",
  enabledManagers: [
    "helm-values",
    "github-actions",
    "regex",
  ],
  packageRules: [
    {
      matchPackageNames: ["jenkins/inbound-agent"],
      versioning: "regex:^(?<major>\\d+)?\\.(?<minor>\\w+?)?_(?<patch>\\w+)?-(?<build>\\d+)?$",
    },
    {
      matchPackageNames: ["jenkins/jenkins"],
      versioning: "regex:^(?<major>\\d+?)\\.(?<minor>\\d+?)\\.(?<patch>\\d+?)(-(?<compatibility>\\w+))?$",
    },
    {
      matchFileNames: ["charts/jenkins/**"],
      postUpgradeTasks: {
        commands: [
          '.github/renovate-postupgrade.sh "{{{depName}}}" "{{{newVersion}}}"',
        ],
        fileFilters: ["charts/jenkins/**"],
        executionMode: "branch",
      },
    },
    {
      matchPackagePatterns: [".*"],
      excludePackagePatterns: ["jenkins/jenkins"],
      minimumReleaseAge: "12 hours",
    },
  ],
  customDatasources: {
    "python_actions": {
      defaultRegistryUrlTemplate: "https://raw.githubusercontent.com/actions/python-versions/main/versions-manifest.json",
      transformTemplates: [
        "{\"releases\": $$[stable=true].files[arch=\"x64\" and platform=\"linux\"].{\"version\":%.version,\"changelogUrl\":\"https://docs.python.org/whatsnew/index.html\"},\"homepage\":\"https://python.org/\",\"changelogUrl\":\"https://docs.python.org/whatsnew/index.html\"}",
      ],
    },
  },
  customManagers: [
    {
      customType: "regex",
      fileMatch: ["(^|/)\\.github/workflows/[^/]+\\.ya?ml$", "(^|/)\\.github/[^/]+\\.sh$"],
      matchStrings: [
        "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s+?[\\w\\s-]*?version:? (?<currentValue>.*)\\s",
        "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*?_VERSION=(?<currentValue>.*)\\s",
      ],
    },
    {
      customType: "regex",
      fileMatch: [
        "^charts/jenkins/Chart.yaml$",
        "^charts/jenkins/values.yaml$",
      ],
      matchStrings: [
        "appVersion: (?<currentValue>.*?)\\s",
        'repository: \\"jenkins/jenkins\\"\\s*?# tag: \\"(?<currentValue>.*?)\\"',
      ],
      depNameTemplate: "jenkins/jenkins",
      datasourceTemplate: "docker",
    },
    {
      customType: "regex",
      fileMatch: ["^charts/jenkins/values.yaml$"],
      matchStringsStrategy: "recursive",
      matchStrings: [
        "installPlugins:[\\s\\w:.-]*?(?:\\r*\\n){2}",
        "- (?<depName>.*?):(?<currentValue>.*?)\\s",
      ],
      datasourceTemplate: "jenkins-plugins",
      versioningTemplate: "regex:^(?<major>\\d+)?\\.(?<minor>\\w+?)?(\\.(?<patch>\\d+?))?$",
    },
    {
      customType: "regex",
      fileMatch: ["^charts/jenkins/Chart.yaml$"],
      matchStringsStrategy: "recursive",
      matchStrings: [
        "artifacthub\\.io\\/images: \\|[\\s\\w:.\\/-]*(?:artifacthub)",
        "image: (?<depName>.*?):(?<currentValue>.*?)\\s",
      ],
      datasourceTemplate: "docker",
      versioningTemplate: "regex:^(?<major>\\d+)?\\.(?<minor>\\w+?)?(_|\\.)(?<patch>\\w+)?(-(?<build>\\d+))?.*",
      depNameTemplate: "{{#if (equals depName 'docker.io/jenkins/jenkins')}}jenkins/jenkins{{else}}{{{depName}}}{{/if}}",
    },
  ],
}

#!/bin/bash

CHARTVERSION="$(jx-release-version -previous-version=from-file:charts/jenkins/Chart.yaml)"
export CHARTVERSION
depName=$(echo "$1" | tr ' ' '\n' | sort | uniq)
export DEPNAME="$depName"
export NEWVERSION="$2"

helm unittest --strict -f 'unittests/*.yaml' charts/jenkins -u
yq eval '.version = env(CHARTVERSION)' -i charts/jenkins/Chart.yaml
sed -i "/git commit to be able to get more details./a \\\n## ${CHARTVERSION}\n\nUpdate \`${DEPNAME}\` to version \`${NEWVERSION}\`" charts/jenkins/CHANGELOG.md
.github/helm-docs.sh