another attempt

.gitea/workflows/renovate.yaml

@@ -10,15 +10,14 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    # REMOVED: job-level container block to avoid the runner's strict auth loop
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
 
       - name: Run Renovate
-        # Uses the Docker container directly as a step action
-        uses: docker://ghcr.io/renovatebot/renovate:37.20.2
+        # Pulled from public Docker Hub instead of ghcr.io
+        uses: docker://renovate/renovate:37.20.2
         env:
-          RENOVATE_CONFIG_FILE: "/workspace/infra/renovate/config.js"
+          RENOVATE_CONFIG_FILE: "${{ github.workspace }}/infra/renovate/config.js"
           LOG_LEVEL: "debug"
           RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}