From 8fe5f43941adccd32a599b4ffeed769b2866d7b3 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 15 Mar 2026 06:00:41 +0000
Subject: [PATCH 1/2] chore(deps): update actions/create-github-app-token
 action to v3

---
 .github/workflows/release-please.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 3d41641f..aae98576 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - name: Generate token
         id: generate-token
-        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
+        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
         with:
           app-id: ${{ vars.SDK_BOT_APP_ID }}
           private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }}

From 53fd09f54d83e2391055d970a38ef5794efe0074 Mon Sep 17 00:00:00 2001
From: "Garen J. Torikian" <gjtorikian@users.noreply.github.com>
Date: Mon, 16 Mar 2026 15:21:51 -0400
Subject: [PATCH 2/2] update GHA grouping

---
 renovate.json | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/renovate.json b/renovate.json
index fbd98c73..28f32d80 100644
--- a/renovate.json
+++ b/renovate.json
@@ -9,6 +9,13 @@
   "timezone": "UTC",
   "rebaseWhen": "conflicted",
   "packageRules": [
+    {
+      "matchManagers": [
+        "github-actions"
+      ],
+      "extractVersion": "^v(?<version>\\d+\\.\\d+\\.\\d+)$",
+      "groupName": "github-actions"
+    },
     {
       "matchUpdateTypes": [
         "minor",