From c46549b2b6486641c6750000d7506e9f5de6bf2c Mon Sep 17 00:00:00 2001
From: Robin <robin@robin.town>
Date: Thu, 20 Jun 2024 16:00:52 -0400
Subject: [PATCH] Refine Renovate config further

By getting it to pin GitHub Actions to specific commits, which hardens our workflows, and fixing a warning about matchPackageNames
---
 renovate.json | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/renovate.json b/renovate.json
index d07703dc..c9c73fa8 100644
--- a/renovate.json
+++ b/renovate.json
@@ -5,15 +5,21 @@
     {
       "extends": ["group:allNonMajor", "schedule:weekly"]
     },
+    {
+      "groupName": "GitHub Actions",
+      "matchDepTypes": ["action"],
+      "pinDigests": true,
+      "extends": ["schedule:monthly"]
+    },
     {
       "description": "Disable Renovate for packages we want to monitor ourselves",
       "groupName": "manually updated packages",
-      "matchPackageNames": ["matrix-js-sdk"],
+      "matchDepNames": ["matrix-js-sdk"],
       "enabled": false
     },
     {
       "groupName": "matrix-widget-api",
-      "matchPackageNames": ["matrix-widget-api"]
+      "matchDepNames": ["matrix-widget-api"]
     },
     {
       "groupName": "Compound",
@@ -22,7 +28,7 @@
     },
     {
       "groupName": "LiveKit client",
-      "matchPackageNames": ["livekit-client"]
+      "matchDepNames": ["livekit-client"]
     },
     {
       "groupName": "LiveKit components",
@@ -30,7 +36,7 @@
     },
     {
       "groupName": "Vaul",
-      "matchPackageNames": ["vaul"],
+      "matchDepNames": ["vaul"],
       "extends": ["schedule:monthly"],
       "prHeader": "Please review modals on mobile for visual regressions."
     }