renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",

  "baseBranches": ["main", "renovate-testing"],
  "useBaseBranchConfig": "merge",

  "extends": [
    "config:recommended",
    "helpers:pinGitHubActionDigests",
    "schedule:earlyMondays"
  ],

  "enabledManagers": [
    "docker-compose",
    "github-actions",
    "pip_requirements",
    "pep621",
    "custom.regex"
  ],

  "customManagers": [
    {
      "customType": "regex",
      "fileMatch": [
        "\\.github\/(?:workflows|actions)\/.+\\.sh"
      ],
      "matchStringsStrategy": "any",
      "matchStrings": [
        "pip\\s+install(\\s+--upgrade)?\\s+(?<depName>[^\\s]+?)==(?<currentValue>.+?)\\s"
      ],
      "datasourceTemplate": "pypi"
    }
  ],

  "packageRules": [
    {
      "groupName": "GitHub Upload/Download Artifacts",
      "matchPackageNames": [
        "actions/upload-artifact",
        "actions/download-artifact"
      ]
    }
  ]
}