How to Version and Upgrade Templates With Renovate
Versioning templates and letting Renovate open upgrade PRs is how scaffolded repos keep pulling platform changes.
Tag your reusable workflows and actions, then configure Renovate to bump those references in every repo. Teams review a PR instead of the platform team hunting down stale copies.
Steps
- Tag reusable workflows and actions with semver.
- Add a
renovate.jsonthat watches GitHub Actions references. - Renovate opens PRs bumping the pinned versions.
- Teams merge to pick up platform changes.
Renovate config
renovate.json
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": ["config:recommended"],
"github-actions": {
"enabled": true,
"pinDigests": true
},
"packageRules": [
{ "matchManagers": ["github-actions"], "groupName": "platform actions" }
]
}Gotchas
- Renovate updates references it can parse; pin actions and reusable workflows by version, not a floating branch.
pinDigestsswaps tags for SHAs, which is safer but produces noisier upgrade PRs.
Related guides
How to Maintain a Reusable Workflow Library for a PlatformCentralize CI logic in a versioned library of reusable workflows called via workflow_call, so every team shar…
How to Run an Internal Action and Module RegistryGive teams a trusted source of internal actions and modules by keeping them in an org registry and allowing o…