Update dependency com.h2database:h2 to v2 [SECURITY]

.github/workflows/deploy.yml

@@ -4,20 +4,13 @@ on: workflow_dispatch
 
 jobs:
   deploy:
-    runs-on: ubuntu-latest
+    runs-on: antville
 
     environment:
       name: p3k.org
       url: https://blog.p3k.org
 
     steps:
-      - name: Set up SSH agent
-        uses: antville/helma/.github/actions/ssh@helma-🐜
-        with:
-          config: ${{ vars.SSH_CONFIG }}
-          key: ${{ secrets.SSH_PRIVATE_KEY }}
-          known-hosts: ${{ vars.SSH_KNOWN_HOSTS }}
-
       - name: Copy files to production server
         run: ssh staging-server deploy-antville
 

.github/workflows/renovate.yml

@@ -0,0 +1,42 @@
+name: Run Renovate
+
+#on: workflow_dispatch
+
+on:
+  schedule:
+    - cron: "42 * * * *"
+
+jobs:
+  renovate:
+    runs-on: antville
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run Renovate
+        run: npx renovate
+        env:
+          # Renovate is using this token to retrieve release notes
+          GITHUB_COM_TOKEN: ${{ secrets.renovate_github_com_token }}
+          # See <https://docs.renovatebot.com/troubleshooting/#log-debug-levels>
+          LOG_LEVEL: info # debug | info | warn | error | fatal
+          RENOVATE_AUTODISCOVER: 'true'
+          RENOVATE_CONFIG_FILE: renovate.json
+          RENOVATE_ENDPOINT: ${{ github.api_url }}
+          RENOVATE_GIT_AUTHOR: Renovate Bot <mail+renovate@antville.org>
+          #RENOVATE_GIT_IGNORED_AUTHORS: 
+          #  - 29139614+renovate[bot]@users.noreply.github.com
+          RENOVATE_IGNORE_PR_AUTHOR: 'true'
+          RENOVATE_LOG_FILE: renovate-log.ndjson
+          RENOVATE_LOG_FILE_LEVEL: debug
+          RENOVATE_PLATFORM: gitea
+          RENOVATE_REPOSITORY_CACHE: 'enabled'
+          # github.token is not working here, it lacks some permissions required by Renovate
+          RENOVATE_TOKEN: ${{ secrets.renovate_token }} #${{ github.token }}
+
+      - name: Save log file
+        uses: actions/upload-artifact@v3
+        with:
+          name: renovate-log.ndjson
+          path: renovate-log.ndjson
+

.github/workflows/stage.yml

@@ -4,25 +4,15 @@ on: workflow_dispatch
 
 jobs:
   stage:
-    runs-on: ubuntu-latest
+    runs-on: antville
 
     environment:
       name: stage
-      url: https://antville-test.online
+      url: ${{ vars.stage_url }}
 
     steps:
       - uses: actions/checkout@v4
 
-      - name: Set up SSH agent
-        uses: antville/helma/.github/actions/ssh@helma-🐜
-        with:
-          config: ${{ vars.SSH_CONFIG }}
-          key: ${{ secrets.SSH_PRIVATE_KEY }}
-          known-hosts: ${{ vars.SSH_KNOWN_HOSTS }}
-
-      - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@v3
-
       - name: Build with Gradle
         run: ./gradlew :build
 

.github/workflows/stale.yml

@@ -7,15 +7,15 @@ on:
 jobs:
   stale:
 
-    runs-on: ubuntu-latest
+    runs-on: antville
     permissions:
       issues: write
       pull-requests: write
 
     steps:
-    - uses: actions/stale@v9
+    - uses: https://github.com/actions/stale@v9
       with:
-        repo-token: ${{ secrets.GITHUB_TOKEN }}
+        repo-token: ${{ github.token }}
         stale-issue-message: 'Stale issue message'
         stale-pr-message: 'Stale pull request message'
         stale-issue-label: 'no-issue-activity'

.github/workflows/test.yml

@@ -4,7 +4,7 @@ on: workflow_dispatch
 
 jobs:
   test:
-    runs-on: host-runner
+    runs-on: debian
 
     environment:
       name: p3k.org
@@ -15,4 +15,36 @@ jobs:
         run: |
           whoami
           pwd
-          find -maxdepth 1 /
+          ls -ahl ~
+          echo $SHELL
+
+      - name: Ping staging server
+        run: ssh staging-server ping
+
+      - uses: actions/checkout@v4
+      
+      - name: Run Renovate
+        run: npx renovate
+        env:
+          # TODO: 
+          #GITHUB_COM_TOKEN=
+          # See <https://docs.renovatebot.com/troubleshooting/#log-debug-levels>
+          LOG_LEVEL: debug # debug | info | warn | error | fatal
+          #RENOVATE_CONFIG_FILE: ./.gitlab/renovate.json
+          RENOVATE_ENDPOINT: ${{ github.api_url }}
+          RENOVATE_GIT_AUTHOR: Renovate Bot <mail+renovate@antville.org>
+          RENOVATE_LOG_FILE: renovate-log.ndjson
+          RENOVATE_LOG_FILE_LEVEL: debug
+          RENOVATE_PLATFORM: gitea
+          #RENOVATE_REPOSITORIES: $CI_PROJECT_PATH
+          RENOVATE_AUTODISCOVER: 'true'
+          RENOVATE_REPOSITORY_CACHE: 'enabled'
+          RENOVATE_TOKEN: ${{ vars.renovate_token }} #${{ github.token }}
+
+      - uses: actions/upload-artifact@v3
+        with:
+          name: Renovate log
+          path: renovate-log.ndjson
+
+      #- name: Build with Gradle
+      #  run: ./gradlew :build

renovate.json

@@ -20,6 +20,7 @@
   },
 
   "labels": ["dependency"],
+  "gitIgnoredAuthors": ["29139614+renovate[bot]@users.noreply.github.com"],
 
   "packageRules": [
     {

tools/antclick/build.gradle

@@ -11,7 +11,7 @@ clean {
 }
 
 dependencies {
-  implementation 'com.h2database:h2:1.4.200'
+  implementation 'com.h2database:h2:2.2.220'
 }
 
 configurations {