Another renovate fix attempt, this time with more CI (#39)

* Fix Renovate v41 configuration errors

Update configuration to be compatible with Renovate v41:
- Change customManagers.fileMatch to managerFilePatterns
- Change packageRules.description from strings to arrays

The previous configuration used deprecated fields that caused
validation errors with renovatebot/github-action@v43 (Renovate v41).

Fixes errors:
- "Custom Manager contains disallowed fields: fileMatch"
- "Invalid configuration option: customManagers[0].fileMatch"
- "Configuration option packageRules[x].description should be a list (Array)"

Assisted-by: Claude Code (Sonnet 4.5)
Signed-off-by: Colin Walters <walters@verbum.org>

* Add CI validation and fork support for Renovate workflow

Ensure we run renovate in dry-run mode.

Assisted-by: Claude Code (Sonnet 4.5)
Signed-off-by: Colin Walters <walters@verbum.org>

---------

Signed-off-by: Colin Walters <walters@verbum.org>

Author: cgwalters

.github/workflows/renovate.yml

@@ -1,5 +1,6 @@
 name: Renovate
 on:
+  pull_request:
   workflow_dispatch:
     inputs:
       log-level:
@@ -13,11 +14,29 @@ on:
   schedule:
     - cron: '3 * * * *'
 jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Validate Renovate config
+        uses: renovatebot/github-action@v43.0.10
+        env:
+          RENOVATE_DRY_RUN: lookup
+          LOG_LEVEL: debug
+        with:
+          configurationFile: renovate-config.js
+          token: '${{ secrets.GITHUB_TOKEN }}'
+
   renovate:
     runs-on: ubuntu-latest
+    needs: validate
+    if: github.event_name != 'pull_request'
     steps:
       - name: Generate Actions Token
         id: token
+        if: github.repository_owner == 'bootc-dev'
         uses: actions/create-github-app-token@v2
         with:
           app-id: ${{ secrets.APP_ID }}
@@ -27,17 +46,11 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v5
 
-      - name: Validate Renovate config
-        run: |
-          docker run --rm -v "$PWD:/repo" -w /repo \
-            ghcr.io/renovatebot/renovate:41 \
-            renovate-config-validator renovate-shared-config.json
-
       - name: Self-hosted Renovate
         uses: renovatebot/github-action@v43.0.10
         env:
-          RENOVATE_DRY_RUN: ${{ github.event_name == 'pull_request' && 'full' }}
+          RENOVATE_DRY_RUN: ${{ github.repository_owner != 'bootc-dev' && 'full' }}
           LOG_LEVEL: ${{ github.event.inputs.log-level || 'info' }}
         with:
           configurationFile: renovate-config.js
-          token: '${{ steps.token.outputs.token }}'
+          token: '${{ steps.token.outputs.token || secrets.GITHUB_TOKEN }}'

renovate-shared-config.json

@@ -18,7 +18,7 @@
   "customManagers": [
     {
       "customType": "regex",
-      "fileMatch": ["(^|/)Containerfile$", "(^|/)Dockerfile$"],
+      "managerFilePatterns": ["(^|/)Containerfile$", "(^|/)Dockerfile$"],
       "matchStrings": [
         "# renovate: datasource=(?<datasource>[a-z-]+) depName=(?<depName>[^\\s]+)\\s+ARG \\w+version=(?<currentValue>.+)"
       ]
@@ -27,7 +27,7 @@
   "packageRules": [
     // Group GitHub Actions dependencies
     {
-      "description": "GitHub Actions dependencies",
+      "description": ["GitHub Actions dependencies"],
       "matchManagers": [
         "github-actions"
       ],
@@ -36,7 +36,7 @@
     },
     // Group Rust dependencies
     {
-      "description": "Rust dependencies",
+      "description": ["Rust dependencies"],
       "matchManagers": [
         "cargo"
       ],
@@ -45,7 +45,7 @@
     },
     // Group Docker dependencies
     {
-      "description": "Docker dependencies",
+      "description": ["Docker dependencies"],
       "matchManagers": [
         "dockerfile",
         "custom.regex"
@@ -55,7 +55,7 @@
     },
     // Disable Containerfile digest pinning
     {
-      "description": "Containerfile digest pinning",
+      "description": ["Containerfile digest pinning"],
       "matchManagers": [
         "dockerfile"
       ],
@@ -66,7 +66,7 @@
     // This is due to there not being an easy way to tell Renovate which
     // Fedora version is "stable" and which has not been released yet.
     {
-      "description": "Disable Fedora OCI updates",
+      "description": ["Disable Fedora OCI updates"],
       "matchManagers": [
         "dockerfile",
         "github-actions"