build: pin github action digests

setchy · setchy · commit fdddbcd97530 · 2025-02-21T14:22:13.000-05:00
Signed-off-by: Adam Setch &lt;adam.setch@outlook.com&gt;
diff --git a/renovate.json b/renovate.json
@@ -5,7 +5,8 @@
     ":separateMultipleMajorReleases",
     ":enableVulnerabilityAlerts",
     "schedule:weekly",
-    "customManagers:biomeVersions"
+    "customManagers:biomeVersions",
+    "helpers:pinGitHubActionDigests"
   ],
   "labels": ["dependency"],
   "prConcurrentLimit": 5,
