updates for renovate.json

Author: joshuafernandes

.github/workflows/renovatebot.yml

@@ -3,9 +3,7 @@ name: renovatebot
 on:
   push:
     branches:
-      - master
-    paths:
-      - '.github/workflows/**'
+      - main
   workflow_dispatch:
 
 jobs:

.github/workflows/sync_gha_allowlist.yml

@@ -3,9 +3,7 @@ name: sync_gha_allowlist
 on:
   push:
     branches:
-      - master
-    paths:
-      - '.github/workflows/**'
+      - main
   workflow_dispatch:
 
 jobs:

renovate.json

@@ -6,16 +6,15 @@
   "dependencyDashboard": false,
   "packageRules": [
     {
-      "description": "Step 1: Pin all GitHub Actions to sha256 digests by default",
+      "description": "1. Pin all GitHub Actions to sha256 digests by default",
       "matchManagers": ["github-actions"],
       "pinDigests": true
     },
     {
-      "description": "Step 2: For trusted actions, allow updates",
+      "description": "2. For trusted actions, allow updates",
       "matchManagers": ["github-actions"],
       "matchPackageNames": [
-        "actions/**",
-        "consensys/github-actions/**"
+        "actions/**"
       ],
       "pinDigests": true
     }

renovatebot/action.yml

@@ -1,7 +1,7 @@
 # SPDX-License-Identifier: Apache-2.0
 ---
 name: 'renovatebot'
-description: 'Composite action to ruin renovatebot on the versions of the GHA'
+description: 'Composite action to run renovatebot on the versions of the GHA'
 
 inputs:
   GH_APP_ID:
@@ -31,7 +31,7 @@ runs:
         private-key: ${{ inputs.GH_PRIVATE_KEY }}
 
     - name: Run Renovate
-      uses: renovatebot/github-action@v40.1.11
+      uses: renovatebot/github-action@68a3ea99af6ad249940b5a9fdf44fc6d7f14378b #v46.1.6
       with:
         configurationFile: renovate.json
         token: ${{ steps.generate_token.outputs.token }}