playbooks/renovate/run.yaml

- name: Run Renovate
  hosts: all
  tasks:
    - name: Run Renovate
      ansible.builtin.command: renovate {{ zuul.project.name }}
      environment:
        LOG_LEVEL: debug
        RENOVATE_GIT_AUTHOR: "Renovatebot <renovatebot@vexxhost.dev>"
        # Common
        GITHUB_COM_TOKEN: "{{ renovate.github_token }}"
        RENOVATE_ENDPOINT: "https://{{ (zuul.project.canonical_hostname == 'github.com') | ternary('api.github.com', 'review.vexxhost.dev') }}"
        RENOVATE_PLATFORM: "{{ (zuul.project.canonical_hostname == 'github.com') | ternary('github', 'gerrit') }}"
        RENOVATE_ALLOWED_COMMANDS: '["^curl"]'
        # GitHub
        RENOVATE_TOKEN: "{{ (zuul.project.canonical_hostname == 'github.com') | ternary(renovate.github_token, omit) }}"
        # Gerrit
        RENOVATE_USERNAME: "{{ (zuul.project.canonical_hostname != 'github.com') | ternary(renovate.gerrit_username, omit) }}"
        RENOVATE_PASSWORD: "{{ (zuul.project.canonical_hostname != 'github.com') | ternary(renovate.gerrit_password, omit) }}"