Manage pip and npm install via renovate

Author: trask

.github/renovate.json5

@@ -216,5 +216,27 @@
       "matchUpdateTypes": ["major"],
       "enabled": false
     }
+  ],
+  "customManagers": [
+    {
+      "customType": "regex",
+      "datasourceTemplate": "pypi",
+      "fileMatch": [
+        "^.github/workflows/"
+      ],
+      "matchStrings": [
+        "pip install (?<depName>[^=]+)==(?<currentValue>[^\\s]+)"
+      ]
+    },
+    {
+      "customType": "regex",
+      "datasourceTemplate": "npm",
+      "fileMatch": [
+        "^.github/workflows/"
+      ],
+      "matchStrings": [
+        "npx (?<depName>[^@]+)@(?<currentValue>[^\\s]+)"
+      ]
+    }
   ]
 }

.github/workflows/release-update-cloudfoundry-index.yml

@@ -30,7 +30,7 @@ jobs:
         run: git checkout -b opentelemetrybot/cloudfoundry-${{ github.run_number }}-${{ github.run_attempt }}
 
       - run: sudo apt-get install jq python3-pip
-      - run: pip install yq==3.4.2
+      - run: pip install yq==3.4.2 --hash=sha256:f916408e834e96f390ef82a36bfcbf24a555ae5a2fcdaef94a2ed5d260d161ef
 
       - name: update index.yml
         run: |

.github/workflows/reusable-markdown-lint-check.yml

@@ -12,9 +12,6 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - name: Install mardkdownlint
-        run: npm install -g [email protected]
-
       - name: Run markdownlint
         run: |
-          markdownlint -c .markdownlint.yml -p .gitignore **/*.md -i licenses/licenses.md
+          npx markdownlint@0.43.0 -c .markdownlint.yml -p .gitignore **/*.md -i licenses/licenses.md