From 8754ab1489406d139acce45beac4b766384540cf Mon Sep 17 00:00:00 2001 From: Dominic Couture Date: Fri, 15 May 2026 13:01:32 +0100 Subject: [PATCH] chore(repo): Remove renovate config validation job This job increases our supply chain risk exposure by fetching the latest version each time it runs. If someone modifies the configuration they should validate it before merging, we don't need a job constantly running for this. The renovate configuration is something that is rarely changed. --- .../workflows/validate-renovate-config.yml | 29 ------------------- 1 file changed, 29 deletions(-) delete mode 100644 .github/workflows/validate-renovate-config.yml diff --git a/.github/workflows/validate-renovate-config.yml b/.github/workflows/validate-renovate-config.yml deleted file mode 100644 index 794ba4339e6..00000000000 --- a/.github/workflows/validate-renovate-config.yml +++ /dev/null @@ -1,29 +0,0 @@ -name: Validate Renovate Config - -on: - pull_request: - paths: - - 'renovate.json5' - -concurrency: - group: ${{ github.workflow }}-${{ github.ref }} - cancel-in-progress: true - -jobs: - validate-renovate-config: - runs-on: ubuntu-latest - steps: - - name: Checkout repo - uses: actions/checkout@v4 - - - name: Setup - id: config - uses: ./.github/actions/init - with: - cache-enabled: true - turbo-signature: ${{ secrets.TURBO_REMOTE_CACHE_SIGNATURE_KEY }} - turbo-team: ${{ vars.TURBO_TEAM }} - turbo-token: ${{ secrets.TURBO_TOKEN }} - - - name: Validate Renovate Config - run: npx --yes --package renovate@latest renovate-config-validator