mirror of
https://github.com/renovatebot/renovate.git
synced 2026-11-04 19:43:41 +00:00
7f40d43179
As part of future changes in #45190, we have found that when using GitHub Actions' dependency lockfile, the digest pinning is manged by the lockfile, rather than being specified in the package file itself. To avoid a "flip flop" where using the manager removes the digest from the package file (relying on the lockfile itself) and then a `pinDigest` update re-adds it to the package file, we can instead follow how `digestOneAndOnly` works and add a means to note `digestManagedExternally`. This isn't currently used, but allows an opt out for github-actions in the future. Co-authored-by: Claude Opus 5 <jamie.tanna+claude-code@mend.io>