From bf9aab79572ca08ad3704a345b2371ef5167594d Mon Sep 17 00:00:00 2001
From: "privilegedescalation-engineer[bot]"
 <269729446+privilegedescalation-engineer[bot]@users.noreply.github.com>
Date: Sun, 22 Mar 2026 07:18:36 +0000
Subject: [PATCH] chore(renovate): add pinDigests to template repo
 renovate.json

Ensures repos created from this template start with GitHub Actions SHA pinning
configured. Matches the pinDigests: true change being applied to all existing
plugin repos (PRI-757).

Without this, new repos created from the template would need a follow-up PR
to add pinDigests.
---
 renovate.json | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/renovate.json b/renovate.json
index 9ca1ba1..d9ce489 100644
--- a/renovate.json
+++ b/renovate.json
@@ -4,6 +4,7 @@
   "baseBranches": ["main"],
   "schedule": ["every weekend"],
   "prConcurrentLimit": 10,
+  "pinDigests": true,
   "packageRules": [
     {
       "matchManagers": ["npm"],
@@ -17,3 +18,4 @@
     }
   ]
 }
+
-- 
2.52.0