From 08bf2d1af4f1f059dfba68cc118477a1deab8d8e Mon Sep 17 00:00:00 2001 From: Brad Jorsch Date: Thu, 11 Jun 2026 09:16:29 -0400 Subject: [PATCH] renovate: Pin all actions PR #49456 set up renovate to pin all actions except `actions/*`. It has now come out that they intend to turn on GitHub's "require actions to be pinned" setting, which does not make an exception for those. We may as well get ahead of things and update renovate now. --- .github/renovate.json5 | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/.github/renovate.json5 b/.github/renovate.json5 index fad0e2269540..8ac0b2e95777 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -102,13 +102,11 @@ // We'll leave major updates ungrouped though, as those likely need more individualized attention. { extends: [ 'helpers:pinGitHubActionDigests' ], - matchPackageNames: [ '!actions/**' ], }, { groupName: 'GitHub Actions minor version bumps', matchDepTypes: [ 'action' ], - matchUpdateTypes: [ 'minor', 'patch', 'pin', 'digest' ], - matchPackageNames: [ '!actions/**' ], + matchUpdateTypes: [ 'minor', 'patch', 'pin', 'digest', 'pinDigest' ], schedule: [ '* 0-3 * * 1' ], additionalReviewers: [ 'team:qualityops' ], },