From ab95a30bef1a29b6a74b1dc21eaeb600c8ce5c8b Mon Sep 17 00:00:00 2001
From: Nathanial Lubitz <nate.lubitz@gmail.com>
Date: Mon, 22 Jun 2026 22:57:29 +1000
Subject: [PATCH] another attempt

---
 .gitea/workflows/renovate.yaml | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/.gitea/workflows/renovate.yaml b/.gitea/workflows/renovate.yaml
index 1bb47d3..37eaa2f 100644
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -10,15 +10,14 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    # REMOVED: job-level container block to avoid the runner's strict auth loop
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
 
       - name: Run Renovate
-        # Uses the Docker container directly as a step action
-        uses: docker://ghcr.io/renovatebot/renovate:37.20.2
+        # Pulled from public Docker Hub instead of ghcr.io
+        uses: docker://renovate/renovate:37.20.2
         env:
-          RENOVATE_CONFIG_FILE: "/workspace/infra/renovate/config.js"
+          RENOVATE_CONFIG_FILE: "${{ github.workspace }}/infra/renovate/config.js"
           LOG_LEVEL: "debug"
           RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}