enable Renovate dependency updates

.github/renovate.json5

@@ -0,0 +1,52 @@
+{
+  $schema: "https://docs.renovatebot.com/renovate-schema.json",
+  extends: [
+    "config:base"
+  ],
+  enabled: true,
+  enabledManagers: [
+    "npm",
+    "gradle",
+    "gradle-wrapper",
+    "github-actions",
+  ],
+
+  // Will auto-merge directly, without a PR, if tests pass - else, makes a PR.
+  // Must add Renovate to 'Allow specified actors to bypass required pull requests'
+  // in branch protection rule
+  automergeType: "branch",
+  platformAutomerge: true,
+  ignoreTests: false,
+  packageRules: [
+    {
+      description: "auto-merge all but major releases",
+      matchUpdateTypes: [
+        "minor",
+        "patch",
+        "pin",
+        "digest",
+      ],
+      automerge: true,
+    }
+  ],
+
+  timezone: "Etc/UTC",
+  schedule: [
+    //"on the first day of the month",
+    "after 10am",
+  ],
+
+  stabilityDays: 14,
+  //  suppressNotifications: [
+  //    "artifactErrors",
+  //    "branchAutomergeFailure",
+  //    "configErrorIssue",
+  //    "deprecationWarningIssues",
+  //    "lockFileErrors",
+  //    "onboardingClose",
+  //    "prEditedNotification",
+  //    "prIgnoreNotification",
+  //  ],
+  prCreation: "status-success",
+  semanticCommits: "disabled",
+}

.github/workflows/run_gradle_task.yml

@@ -5,6 +5,19 @@ run-name: "Gradle Task ${{ inputs.gradle-task }} @ ${{ inputs.runs-on }}"
 
 on:
   workflow_dispatch:
+    inputs:
+      gradle-task:
+        description: "The Gradle task to run, including any flags"
+        required: true
+        type: string
+      runs-on:
+        description: "OSes to run the task on"
+        required: true
+        type: string
+      checkout-ref:
+        description: "The repository reference to checkout"
+        required: false
+        type: string
   workflow_call:
     inputs:
       gradle-task:
@@ -15,6 +28,10 @@ on:
         description: "OSes to run the task on"
         required: true
         type: string
+      checkout-ref:
+        description: "The repository reference to checkout"
+        required: false
+        type: string
 
 
 concurrency:
@@ -40,6 +57,8 @@ jobs:
 
       - name: Checkout the repo
         uses: actions/checkout@v3
+        with:
+          ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}
 
       - name: Validate Gradle Wrapper
         uses: gradle/wrapper-validation-action@v1

.github/workflows/run_publish_maven.yml

@@ -3,7 +3,17 @@ name: Publish Maven
 
 on:
   workflow_dispatch:
+    inputs:
+      checkout-ref:
+        description: "The repository reference to checkout"
+        required: false
+        type: string
   workflow_call:
+    inputs:
+      checkout-ref:
+        description: "The repository reference to checkout"
+        required: false
+        type: string
 
 
 concurrency:
@@ -31,3 +41,4 @@ jobs:
       runs-on: macos-latest # only macOS supports building all Kotlin targets
       gradle-task: >-
         publishAllPublicationsToSonatypeReleaseRepository --stacktrace --no-configuration-cache --no-parallel
+      checkout-ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}

.github/workflows/run_publish_site.yml

@@ -3,7 +3,17 @@ name: Publish Site
 
 on:
   workflow_dispatch:
+    inputs:
+      checkout-ref:
+        description: "The repository reference to checkout"
+        required: false
+        type: string
   workflow_call:
+    inputs:
+      checkout-ref:
+        description: "The repository reference to checkout"
+        required: false
+        type: string
 
 
 concurrency:
@@ -18,6 +28,8 @@ jobs:
     steps:
       - name: Checkout the repo
         uses: actions/checkout@v3
+        with:
+          ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}
 
       - name: Setup JDK
         uses: actions/setup-java@v3

.github/workflows/run_tests.yml

@@ -44,3 +44,4 @@ jobs:
       runs-on: ${{ matrix.os }}
       gradle-task: >-
         ${{ matrix.task }} --stacktrace
+      checkout-ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}

.github/workflows/workflow_pull_request.yml

@@ -4,6 +4,7 @@ name: Pull Requests
 on:
   workflow_dispatch:
   pull_request:
+  merge_group:
 
 
 concurrency:

.github/workflows/workflow_release.yml

@@ -3,6 +3,11 @@ name: Releases
 
 on:
   workflow_dispatch:
+    inputs:
+      checkout-ref:
+        description: "The repository reference to checkout"
+        required: false
+        type: string
   push:
     branches: [ main ]
   release:
@@ -31,6 +36,8 @@ jobs:
       contents: write
       packages: write
       checks: write
+    with:
+      checkout-ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}
 
   publish-site:
     needs: tests
@@ -43,3 +50,5 @@ jobs:
       checks: write
       pages: write
       id-token: write
+    with:
+      checkout-ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}