feat: enable renovate bot

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @coreweave/app-platforms

.github/renovate.json5

@@ -0,0 +1,5 @@
+{
+  extends: [
+    "github>coreweave/renovate-config"
+  ],
+}

.github/workflows/publish-image.yaml

@@ -40,6 +40,7 @@ jobs:
           context: ./
           file: ./Docker/Dockerfile
           build-args: |
+            # renovate: depName=tailscale.com datasource=go
             VERSION=${{ env.UPSTREAM_TS_VERSION }}
           tags: |
             ghcr.io/${{ github.repository }}:${{ env.UPSTREAM_TS_VERSION }}

.github/workflows/renovate.yaml

@@ -0,0 +1,64 @@
+---
+  # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+  name: "Renovate"
+
+  on:
+    workflow_dispatch:
+      inputs:
+        dryRun:
+          description: Dry Run
+          default: "false"
+          required: false
+        logLevel:
+          description: Log Level
+          default: debug
+          required: false
+        version:
+          description: Renovate version
+          default: latest
+          required: false
+    schedule:
+      - cron: "0 * * * *" # Every hour
+    push:
+      branches: ["main"]
+      paths:
+        - .github/renovate.json5
+        - .github/renovate/**.json5
+
+  concurrency:
+    group: ${{ github.workflow }}-${{ github.event.number || github.ref }}
+    cancel-in-progress: true
+
+  env:
+    LOG_LEVEL: "${{ inputs.logLevel || 'debug' }}"
+    RENOVATE_AUTODISCOVER: true
+    RENOVATE_AUTODISCOVER_FILTER: "${{ github.repository }}"
+    RENOVATE_DRY_RUN: "${{ inputs.dryRun == true }}"
+    RENOVATE_PLATFORM: github
+    RENOVATE_PLATFORM_COMMIT: true
+    WORKFLOW_RENOVATE_VERSION: "${{ inputs.version || 'latest' }}"
+
+  jobs:
+    renovate:
+      name: Renovate
+      runs-on: ubuntu-latest
+      steps:
+        - name: Generate Token
+          uses: actions/create-github-app-token@v1
+          id: app-token
+          with:
+            app-id: "${{ secrets.ORG_RENOVATE_CLIENTID }}"
+            private-key: "${{ secrets.ORG_RENOVATE_PRIVATEKEY }}"
+            owner: "${{ github.repository_owner }}"
+
+        - name: Checkout
+          uses: actions/checkout@v4
+          with:
+            token: "${{ steps.app-token.outputs.token }}"
+
+        - name: Renovate
+          uses: renovatebot/[email protected]
+          with:
+            configurationFile: .github/renovate.json5
+            token: "${{ steps.app-token.outputs.token }}"
+            renovate-version: "${{ env.WORKFLOW_RENOVATE_VERSION }}"

chart/tailscale-derp/Chart.yaml

@@ -3,4 +3,5 @@ name: tailscale-derp
 description: Run a custom tailscale derp server on Kubernetes.
 type: application
 version: 0.2.0
+# renovate: depName=ghcr.io/coreweave/tailscale-derp datasource=docker
 appVersion: "v1.68.0"