ci: use digest pinning

.github/workflows/main.yml

@@ -60,7 +60,7 @@ jobs:
 
       - name: Upload coverage to Codecov
         if: matrix.os == 'ubuntu-latest' && matrix.python-version == '3.11'
-        uses: codecov/codecov-action@v3.1.4
+        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
 
   publish-pypi:
     name: Release to PyPI
@@ -83,7 +83,7 @@ jobs:
         run: poetry build
 
       - name: Publish package to PyPI
-        uses: pypa/gh-action-pypi-publish@v1.8.6
+        uses: pypa/gh-action-pypi-publish@a56da0b891b3dc519c7ee3284aff1fad93cc8598 # v1.8.6
 
   publish-aur:
     name: Release to AUR
@@ -99,7 +99,7 @@ jobs:
           sed -i "s|\(^pkgver=\).*$|\1\"${VERSION}\"|" ./PKGBUILD
 
       - name: Deploy PKGBUILD to the Arch User Repository
-        uses: KSXGitHub/github-actions-deploy-aur@v2.7.0
+        uses: KSXGitHub/github-actions-deploy-aur@063daf78a56662642bb00049ce78425ff6d0fad7 # v2.7.0
         with:
           pkgname: python-images-upload-cli
           pkgbuild: ./PKGBUILD

.pre-commit-config.yaml

@@ -32,7 +32,7 @@ repos:
       - id: check-github-workflows
       - id: check-renovate
 
-  - repo: https://github.com/charliermarsh/ruff-pre-commit
+  - repo: https://github.com/astral-sh/ruff-pre-commit
     rev: v0.0.272
     hooks:
       - id: ruff

.renovaterc.json

@@ -1,5 +1,4 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:base", "github>DeadNews/renovate-config"],
-  "automergeSchedule": ["every weekend"]
+  "extends": ["config:base", "github>DeadNews/renovate-config"]
 }