From 571147d4be2324d55368ab55245abc218ccbd8eb Mon Sep 17 00:00:00 2001 From: Adam Setch Date: Thu, 8 Oct 2026 07:42:09 -0700 Subject: [PATCH 1/2] ci(renovate): use the shared Renovate config validator --- .github/workflows/renovate.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 .github/workflows/renovate.yml diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml new file mode 100644 index 0000000..3407d72 --- /dev/null +++ b/.github/workflows/renovate.yml @@ -0,0 +1,15 @@ +name: Renovate Config Validation + +on: + push: + branches: + - main + paths: + - renovate.json + pull_request: + paths: + - renovate.json + +jobs: + validate: + uses: gitify-app/.github/.github/workflows/renovate-config-validator.yml@main From 8a3eccf8ff75c67ac8cb7cb9ea5c48cf289a0666 Mon Sep 17 00:00:00 2001 From: Adam Setch Date: Thu, 8 Oct 2026 14:47:00 -0700 Subject: [PATCH 2/2] fix(ci): secure shared Renovate validator workflow --- .github/workflows/renovate.yml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index 3407d72..6582bfb 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -6,10 +6,15 @@ on: - main paths: - renovate.json + - .github/workflows/renovate.yml pull_request: paths: - renovate.json + - .github/workflows/renovate.yml + +permissions: + contents: read jobs: validate: - uses: gitify-app/.github/.github/workflows/renovate-config-validator.yml@main + uses: gitify-app/.github/.github/workflows/renovate-config-validator.yml@000f921e8c370889fa00093ce9ce910fcefcc470 # main