From 24b02bb34dd3d1c4b6037a85f273b69489e5ea11 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 15 Mar 2026 01:12:53 +0000
Subject: [PATCH 1/2] chore(deps): update actions/create-github-app-token
 action to v3

---
 .github/workflows/release-please.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index f727f274..6d6916a3 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - name: Generate token
         id: generate-token
-        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
+        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
         with:
           app-id: ${{ vars.SDK_BOT_APP_ID }}
           private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }}

From 9d7a36705f411658e56a9fd83fb345fb2ccc29ea Mon Sep 17 00:00:00 2001
From: "Garen J. Torikian" <gjtorikian@users.noreply.github.com>
Date: Mon, 16 Mar 2026 11:28:44 -0400
Subject: [PATCH 2/2] exact match GitHub Actions

---
 renovate.json | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/renovate.json b/renovate.json
index fbd98c73..74580978 100644
--- a/renovate.json
+++ b/renovate.json
@@ -9,6 +9,12 @@
   "timezone": "UTC",
   "rebaseWhen": "conflicted",
   "packageRules": [
+    {
+      "matchManagers": [
+        "github-actions"
+      ],
+      "extractVersion": "^v(?<version>\\d+\\.\\d+\\.\\d+)$"
+    },
     {
       "matchUpdateTypes": [
         "minor",