name: lock-threads

on:
  # run daily
  schedule:
    - cron: '0 0 * * *'

  # allow manual trigger
  workflow_dispatch:

permissions:
  issues: write
  pull-requests: write

# Ensure only one lock action can run at a time
concurrency:
  group: lock

jobs:
  lock:
    runs-on: ubuntu-latest
    steps:
      - uses: dessant/lock-threads@be8aa5be94131386884a6da4189effda9b14aa21 # v4.0.1
        if: github.repository == 'renovatebot/renovate'
        with:
          github-token: ${{ github.token }}
          issue-inactive-days: 30
          pr-inactive-days: 30
