diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 3c74f1b326..5d35b27c1d 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -2,6 +2,10 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:recommended",
+    // https://docs.renovatebot.com/modules/manager/github-actions/
+    // https://docs.renovatebot.com/presets-helpers/
+    "helpers:pinGitHubActionDigestsToSemver",
+    "helpers:githubDigestChangelogs",
     ":gitSignOff"
   ],
   "postUpdateOptions": ["gomodTidy"],