Should get raw hashes used instead of tags.

Matches new policies for Google projects.

renovate.json

@@ -2,8 +2,9 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:recommended",
+    "helpers:pinGitHubActionDigestsToSemver",
     "schedule:weekly",
     "group:allNonMajor",
     ":disableDependencyDashboard"
-  ],
+  ]
 }