From b66b2f77e09e26d922b9a554e57e4446faa6da72 Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Wed, 25 Mar 2026 11:21:30 +0100 Subject: [PATCH] ci: renovate: pin actions to digests Signed-off-by: Sebastiaan van Stijn --- .github/renovate.json5 | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/renovate.json5 b/.github/renovate.json5 index 3c74f1b326..5d35b27c1d 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -2,6 +2,10 @@ "$schema": "https://docs.renovatebot.com/renovate-schema.json", "extends": [ "config:recommended", + // https://docs.renovatebot.com/modules/manager/github-actions/ + // https://docs.renovatebot.com/presets-helpers/ + "helpers:pinGitHubActionDigestsToSemver", + "helpers:githubDigestChangelogs", ":gitSignOff" ], "postUpdateOptions": ["gomodTidy"],