From e05de3abd1e4280fda4f216a10d7e66087d33287 Mon Sep 17 00:00:00 2001
From: "batch-changes-sourcegraph[bot]"
 <272382341+batch-changes-sourcegraph[bot]@users.noreply.github.com>
Date: Wed, 29 Apr 2026 18:04:23 +0000
Subject: [PATCH] chore(github-actions): add Renovate config for GitHub Actions
 SHA pinning

Co-authored-by: Sourcegraph <batch-changes@sourcegraph.com>
---
 .github/renovate.json5 | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 .github/renovate.json5

diff --git a/.github/renovate.json5 b/.github/renovate.json5
new file mode 100644
index 0000000..9039e0a
--- /dev/null
+++ b/.github/renovate.json5
@@ -0,0 +1,18 @@
+{
+  "extends": [
+    "config:recommended",
+    "helpers:pinGitHubActionDigests"
+  ],
+  "packageRules": [
+    {
+      "description": "Group all GitHub Actions updates into single PR",
+      "matchManagers": ["github-actions"],
+      "groupName": "GitHub Actions"
+    },
+    {
+      "description": "Disable container image updates - GitHub Actions pinning only",
+      "matchDatasources": ["docker"],
+      "enabled": false
+    }
+  ]
+}