From b12fdab4c0cd21c5ac1c4bb2ea9970723e6a550b Mon Sep 17 00:00:00 2001
From: Andrew Haines <haines@cerbos.dev>
Date: Tue, 25 Nov 2025 11:22:15 +0000
Subject: [PATCH] Pin GitHub Action digests

Signed-off-by: Andrew Haines <haines@cerbos.dev>
---
 renovate.json | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 renovate.json

diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..a9ead8f
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,18 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "configMigration": true,
+  "commitMessageLowerCase": "never",
+  "minimumReleaseAge": "5 days",
+  "internalChecksFilter": "strict",
+  "extends": [
+    "config:recommended",
+    "group:allNonMajor",
+    "helpers:pinGitHubActionDigests",
+    "schedule:weekly",
+    ":automergeDisabled",
+    ":combinePatchMinorReleases",
+    ":gitSignOff",
+    ":renovatePrefix",
+    ":separateMultipleMajorReleases"
+  ]
+}