From cf90651a2adb36f403924b8b31b38730bfdd01cd Mon Sep 17 00:00:00 2001
From: Taras <505555+ribtoks@users.noreply.github.com>
Date: Fri, 10 Apr 2026 14:58:05 +0300
Subject: [PATCH] Pin GitHub Actions digests via renovate

---
 renovate.json | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/renovate.json b/renovate.json
index 38872893..e4d84303 100644
--- a/renovate.json
+++ b/renovate.json
@@ -8,6 +8,15 @@
   "postUpdateOptions": ["gomodTidy"],
   "prConcurrentLimit": 5,
   "packageRules": [
+    {
+      "matchDepTypes": ["action"],
+      "pinDigests": true
+    },
+    {
+      "extends": ["helpers:pinGitHubActionDigests"],
+      "extractVersion": "^(?<version>v?\\d+\\.\\d+\\.\\d+)$",
+      "versioning": "regex:^v?(?<major>\\d+)(\\.(?<minor>\\d+)\\.(?<patch>\\d+))?$"
+    },
     {
       "matchUpdateTypes": ["patch"],
       "automerge": true,