chore(renovate): strengthen dependency updates (#298)

diff --git a/renovate.json b/renovate.json
index e9263da3b3781ec658a4195ae84a31435f636fb5..e89cb29aff972fcfe2cff115f497c486b6450bc5 100644 (file)
--- a/renovate.json
+++ b/renovate.json
@@ -4,10 +4,16 @@
     "config:recommended",
     "abandonments:recommended",
     ":configMigration",
+    "helpers:pinGitHubActionDigests",
+    "security:minimumReleaseAgePypi",
     "group:allNonMajor",
     "schedule:daily",
     ":maintainLockFilesWeekly"
   ],
+  "osvVulnerabilityAlerts": true,
+  "vulnerabilityAlerts": {
+    "addLabels": ["security"]
+  },
   "customManagers": [
     {
       "customType": "regex",