renovate-config/default.json

{
  "extends": [
    "config:best-practices"
  ],
  "reviewersFromCodeOwners": true,
  "lockFileMaintenance": {
    "enabled": true
  },
  "packageRules": [
    {
      "matchUpdateTypes": ["digest"],
      "automerge": true
    },
    {
      "matchPackageNames": [
        "/^actions\\//"
      ],
      "matchManagers": [
        "github-actions"
      ],
      "registryUrls": [
        "https://c.csw.im"
      ]
    }
  ]
}