Attempted config change

Author: anomiex

.github/renovate.json5

@@ -97,6 +97,22 @@
 			matchPackageNames: [ 'docker/**' ],
 		},
 
+		// QualityOps decided they want all these pinned to digests. They tried to have Dependabot create PRs automatically, but as we use Renovate, do it here instead.
+		{
+			extends: [ 'helpers:pinGitHubActionDigests' ],
+			matchPackageNames: [ '!actions/**' ],
+		},
+		{
+			groupName: 'GitHub Actions minor version bumps',
+			matchDepTypes: [ 'action' ],
+			matchUpdateTypes: [ 'minor', 'patch', 'pin', 'digest' ],
+			matchPackageNames: [ '!actions/**' ],
+			schedule: [ '* 0-3 * * 1' ],
+			reviewers: [
+				/* TODO */
+			],
+		},
+
 		// Bundled, WordPress dependencies are separated from 'monorepo:wordpress' while
 		// they're still considered unstable and can have significant breaking changes.
 		// Since they're not externalized to WP, they have higher chance of impacting functionality.