Michael Ramos 93159240a7 chore: pin deploy.yml actions to SHAs + add Renovate (#244) ...

* chore: pin GitHub Actions to SHAs and add Renovate config

Pin all actions in deploy.yml to full commit SHAs to prevent tag
force-push supply chain attacks. Upgrade actions/checkout from v4
to v6.0.2 to match release.yml.

Add renovate.json scoped to GitHub Actions only — weekly grouped
PRs with automerge, zero noise from npm dependencies.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* chore: move renovate.json to .github/renovate.json

Reduces root directory clutter. Renovate supports this path natively.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-07 16:44:25 -08:00

..

workflows

chore: pin deploy.yml actions to SHAs + add Renovate (#244)

2026-03-07 16:44:25 -08:00

renovate.json

chore: pin deploy.yml actions to SHAs + add Renovate (#244)

2026-03-07 16:44:25 -08:00