From c38146835236d9aa1b9e9d66c896f5656635c4b0 Mon Sep 17 00:00:00 2001
From: Renovater <renovater@noreply.localhost>
Date: Sun, 24 Aug 2025 10:45:43 +0000
Subject: [PATCH] Pin dependencies

---
 .forgejo/workflows/renovater.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.forgejo/workflows/renovater.yml b/.forgejo/workflows/renovater.yml
index ab28968..0a54f02 100644
--- a/.forgejo/workflows/renovater.yml
+++ b/.forgejo/workflows/renovater.yml
@@ -9,9 +9,9 @@ on:
 jobs:
   renovate:
     runs-on: docker
-    container: ghcr.io/renovatebot/renovate:latest
+    container: ghcr.io/renovatebot/renovate:latest@sha256:90df8f81b7e2661b9b2d2a7f355f916c65c4f38937325378f3911fe1ee8fee11
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - run: renovate
         env:
           RENOVATE_CONFIG_FILE: "/workspace/watson/renovater/config.js"