chore: add labels; keep @bfra-me/renovate-action pinned to major

.changeset/twenty-scissors-sleep.md

@@ -0,0 +1,6 @@
+---
+"@bfra.me/.github": patch
+---
+
+Add labels and keep @bfra-me/renovate-action pinned to major version
+

.github/renovate.json5

@@ -4,11 +4,21 @@
     'github>bfra-me/renovate-config#v3',
     'github>bfra-me/renovate-config:internal.json5#v3',
   ],
+  packageRules: [
+    {
+      description: 'Disable digest pinning for @bfra-me GitHub actions and reusable workflows.',
+      matchDepTypes: ['action'],
+      matchPackagePrefixes: ['@bfra.me/', 'bfra-me/'],
+      matchUpdateTypes: ['minor', 'patch', 'digest'],
+      pinDigests: false,
+      rangeStrategy: 'replace',
+      updatePinnedDependencies: false,
+    },
+  ],
   postUpgradeTasks: {
     commands: [
       'npm install -g [email protected]',
       'pnpm install --frozen-lockfile --ignore-scripts',
-      'git checkout -- .npmrc',
       'pnpm run format',
     ],
     executionMode: 'branch',

.github/workflows/renovate.yaml

@@ -89,7 +89,7 @@ jobs:
             ${{ github.event.repository.name == '.github' && !contains('["issues", "pull_request"]', github.event_name) && github.ref == 'refs/heads/main' }}
           dry_run: ${{ github.event_name == 'push' && github.ref != 'refs/heads/main' }}
         if: github.event_name != 'push' || steps.filter.outputs.changes == 'true'
-        uses: bfra-me/renovate-action@v3.170.0
+        uses: bfra-me/renovate-action@v3
         with:
           autodiscover: ${{ env.autodiscover }}
           branch: ${{ env.dry_run == 'true' && github.ref_name || '' }}

common-settings.yaml

@@ -134,6 +134,10 @@ repository:
 
 # Labels: define labels for Issues and Pull Requests
 labels:
+  - name: automerge
+    color: '#8f4fbc'
+    description: ''
+
   - name: bug
     color: '#d73a4a'
     description: Something isn't working
@@ -166,10 +170,26 @@ labels:
     color: '#e4e669'
     description: This doesn't seem right
 
+  - name: major
+    color: '#b60205'
+    description: ''
+
+  - name: minor
+    color: '#2729A8'
+    description: ''
+
+  - name: patch
+    color: '#27A89F'
+    description: ''
+
   - name: question
     color: '#d876e3'
     description: Further information is requested
 
+  - name: renovate
+    color: '#dd42f5'
+    description: Universal dependency update tool <https://mend.io/renovate>
+
   - name: security
     color: '#ff0000'
     description: Security vulnerability