Skip to content

fix(renovate): Shard autodiscover across matrix to avoid 1h app token expiry#534

Merged
erezrokah merged 1 commit into
mainfrom
claude/nice-tereshkova-49fe73
Jun 2, 2026
Merged

fix(renovate): Shard autodiscover across matrix to avoid 1h app token expiry#534
erezrokah merged 1 commit into
mainfrom
claude/nice-tereshkova-49fe73

Conversation

@erezrokah
Copy link
Copy Markdown
Member

Splits the single autodiscover Renovate job into 4 parallel matrix shards filtered by RENOVATE_AUTODISCOVER_FILTER so each shard mints its own app token and finishes well under the 1h GitHub App installation-token lifetime (see run 26795902608 for the bad-credentials / Token expired failure mode).

… expiry

Single autodiscover job now exceeds the 1h GitHub App installation token
lifetime, causing mid-run `bad-credentials` failures. Split into 4 parallel
matrix shards filtered by `RENOVATE_AUTODISCOVER_FILTER`; each shard mints its
own token and finishes well under 1h. Targeted dispatch (single-repo override)
preserved in a separate job.
@erezrokah erezrokah marked this pull request as ready for review June 2, 2026 08:44
@erezrokah erezrokah requested a review from a team as a code owner June 2, 2026 08:44
@erezrokah erezrokah requested review from Copilot, mnorbury and stoovon and removed request for a team June 2, 2026 08:44
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Splits the scheduled autodiscover Renovate job into 4 parallel matrix shards (each with its own GitHub App token and prefix-based RENOVATE_AUTODISCOVER_FILTER) so each shard completes within the 1h installation-token TTL, while keeping the existing targeted-repo behavior in a separate job.

Changes:

  • Introduces renovate-sharded job (runs only when no repositories input is provided) with a 4-way [a-e | f-m | n-r | s-z0-9] shard matrix, each minting its own app token and using a per-shard cache key.
  • Renames the prior job to renovate-targeted (runs only when repositories input is set), removes the now-redundant per-step if on the Configure targeted run step, and namespaces its cache key with -targeted- to avoid collisions with shard caches.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/renovate.yml
@erezrokah erezrokah merged commit a8f5c17 into main Jun 2, 2026
4 checks passed
@erezrokah erezrokah deleted the claude/nice-tereshkova-49fe73 branch June 2, 2026 08:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants