From 9c0b4270304f9ebce521ea8560a4cfb66671bdff Mon Sep 17 00:00:00 2001
From: =?utf8?q?J=C3=A9r=C3=B4me=20Benoit?= <jerome.benoit@piment-noir.org>
Date: Thu, 29 Oct 2026 01:50:02 +0100
Subject: [PATCH] chore(renovate): strengthen dependency updates (#298)

---
 renovate.json | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/renovate.json b/renovate.json
index e9263da..e89cb29 100644
--- a/renovate.json
+++ b/renovate.json
@@ -4,10 +4,16 @@
     "config:recommended",
     "abandonments:recommended",
     ":configMigration",
+    "helpers:pinGitHubActionDigests",
+    "security:minimumReleaseAgePypi",
     "group:allNonMajor",
     "schedule:daily",
     ":maintainLockFilesWeekly"
   ],
+  "osvVulnerabilityAlerts": true,
+  "vulnerabilityAlerts": {
+    "addLabels": ["security"]
+  },
   "customManagers": [
     {
       "customType": "regex",
-- 
2.53.0