name: lock-threads

on:
  # run daily
  schedule:
    - cron: '0 0 * * *'

  # allow manual trigger
  workflow_dispatch:

permissions:
  issues: write
  pull-requests: write

# Ensure only one lock action can run at a time
concurrency:
  group: lock

jobs:
  lock:
    runs-on: ubuntu-latest
    steps:
      - uses: dessant/lock-threads@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771 # v5.0.1
        if: github.repository == 'renovatebot/renovate'
        with:
          github-token: ${{ github.token }}
          issue-inactive-days: 30
          pr-inactive-days: 30
          process-only: 'issues, prs'