diff --git a/.github/renovate.json5 b/.github/renovate.json5
index d1fc7842..db699039 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -18,6 +18,11 @@
       groupName: "prettier",
       matchPackageNames: ["prettier"],
     },
+    {
+      "matchDepTypes": ["action"],
+      "excludePackagePrefixes": ["actions/", "github/"],
+      "pinDigests": true,
+    },
   ],
   "ignoreDeps": [
     // manually bumping