Message-ID: <gh-pgjdbc-pgjdbc-4112@github.com>
From: "vlsi (@vlsi)" <noreply+vlsi@github.com>
To: "pgjdbc/pgjdbc" <noreply+pgjdbc-pgjdbc@github.com>
Date: Tue, 26 May 2026 10:38:38 +0000
Subject: [pgjdbc/pgjdbc] PR #4112: ci: validate renovate.json on push and pull request
List-Id: <gh-pgjdbc-pgjdbc.github.com>
X-GitHub-Author-Id: 213894
X-GitHub-Author-Login: vlsi
X-GitHub-Issue: 4112
X-GitHub-Labels: chore
X-GitHub-Repo: pgjdbc/pgjdbc
X-GitHub-State: merged
X-GitHub-Type: pull_request
X-GitHub-Url: https://github.com/pgjdbc/pgjdbc/pull/4112
Content-Type: text/plain; charset=utf-8

## Summary
- Adds `.github/workflows/renovate-config-lint.yaml` that runs `renovate-config-validator` from the official `renovate/renovate` image whenever `renovate.json` (or the workflow itself) changes on `push` or `pull_request`.
- Catches Renovate config mistakes before they silently break dependency-update PRs.

Based on the pattern used in [Netcracker/qubership-profiler-agent](https://github.com/Netcracker/qubership-profiler-agent/blob/main/.github/workflows/renovate-config-lint.yaml). Permissions follow the existing pgjdbc convention (`permissions: read-all`, pinned action SHA).

## Test plan
- [ ] Workflow triggers and passes on this PR (no `renovate.json` change, so the path filter should keep it from running — verify by editing `renovate.json` if needed).
- [ ] Intentionally break `renovate.json` locally and confirm `renovate-config-validator` reports the error.

🤖 Generated with [Claude Code](https://claude.com/claude-code)