name: Validate Renovate Config

on:
  pull_request:
    paths:
      - 'renovate.json'
      - '.github/workflows/validate-renovate-config.yml'
  push:
    branches:
      - main
    paths:
      - 'renovate.json'
      - '.github/workflows/validate-renovate-config.yml'

permissions:
  contents: read

jobs:
  validate:
    name: Validate Renovate Configuration
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
      - name: Checkout repository
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6

      - name: Validate renovate.json
        run: npx --yes --package renovate -- renovate-config-validator