renovate-config/renovate.json

{
  "extends": [
    "config:recommended",
    "helpers:pinGitHubActionDigests"
  ]
}