ci: pin commit for actions (#418)

sapphi-red · web-flow · commit 90cff49287fd · 2025-03-24T14:09:23.000+01:00
diff --git a/.github/renovate.json5 b/.github/renovate.json5
@@ -9,6 +9,11 @@
       "depTypeList": ["peerDependencies"],
       "enabled": false,
     },
+    {
+      "matchDepTypes": ["action"],
+      "excludePackagePrefixes": ["actions/", "github/"],
+      "pinDigests": true,
+    },
   ],
   "ignoreDeps": [
     // manually bumping
