From 1ba1a67f016282cb5ee9b03cea478dcf1cfa70d0 Mon Sep 17 00:00:00 2001 From: "privilegedescalation-engineer[bot]" <269729446+privilegedescalation-engineer[bot]@users.noreply.github.com> Date: Wed, 13 May 2026 12:20:57 +0000 Subject: [PATCH] Add self-hosted Renovate runner (#70) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * chore(e2e): delete all E2E files and cleanup Delete all E2E test infrastructure from the repository: - scripts/deploy-e2e-headlamp.sh - scripts/teardown-e2e-headlamp.sh - .github/workflows/e2e.yaml - playwright.config.ts - e2e/ directory (auth.setup.ts, kube-vip.spec.ts) Also removed e2e and e2e:headed scripts from package.json and removed @playwright/test devDependency. Context: [PRI-1133](https://github.com/privilegedescalation/paperclip-internal/issues/PRI-1133) — full E2E purge across org. Co-Authored-By: Paperclip * fix: update pnpm-lock.yaml after E2E deletion Remove @playwright/test dependencies after E2E infrastructure cleanup. Resolves ERR_PNPM_OUTDATED_LOCKFILE on PR. Co-Authored-By: Paperclip * Add self-hosted Renovate runner workflow Creates .github/workflows/renovate.yaml using renovatebot/github-action with a GitHub App token on a weekly schedule. Extends the shared renovate-config from the privilegedescalation/.github repository. Part of PRI-413 Co-Authored-By: Paperclip --------- Co-authored-by: Chris Farhood Co-authored-by: Paperclip --- .github/workflows/renovate.yaml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 .github/workflows/renovate.yaml diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml new file mode 100644 index 0000000..54880a1 --- /dev/null +++ b/.github/workflows/renovate.yaml @@ -0,0 +1,20 @@ +name: Renovate +on: + schedule: + - cron: '0 3 * * 0' + workflow_dispatch: +jobs: + renovate: + runs-on: runners-privilegedescalation + steps: + - uses: actions/checkout@v4 + - name: Generate GitHub App token + id: app-token + uses: actions/create-github-app-token@v3 + with: + app-id: ${{ secrets.RELEASE_APP_ID }} + private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} + - uses: renovatebot/github-action@v40.3.0 + with: + token: ${{ steps.app-token.outputs.token }} + configurationFile: renovate.json \ No newline at end of file