feat(github-actions): Change behavior to not add "renovate" to inline yaml comments when pinning

[soenkeliebau]

Changes:

When Renovate pins docker hashes for github actions it adds an inline comment to the lines to specify which version of the action this hash refers to.

Currently the lines will look like this:
- uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2.4.0

after this change, any newly written lines will look like this:
- uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # tag=v2.4.0

Existing lines will not be changed, but still be correctly parsed and written in the new format when they are next updated.

I have also slightly changed the Regex used to parse these strings to be more generous with extra whitespaces. In its current form the regex would tolerate extra whitespaces before the comment, but it seems like this is more or less accidental as they would be added to the currentValue capture group (and then probably stripped or trimmed somewhere, but why take the risk?).

Context:

Closes #14105

Documentation (please check one with an [x])

• I have updated the documentation, or
• No documentation update is required

How I've tested my work (please tick one)

I have verified these changes via:

• Code inspection only, or
• Newly added/modified unit tests, or
• No unit tests but ran on a real repository, or
• Both unit tests + ran on a real repository

[rarkins]

Can we test this on a live first? Need a few use cases:

• Unpinned -> pinned
• Pinned with renovate comment -> pinned without renovate comment
• Pinned without renovate comment (new style) -> retain new style

[soenkeliebau]

I've rigged a very quick test here:

https://github.com/soenkeliebau/renovate-test/pulls

Happy to create additional checks - also happy to merge a pr if you want to create some scenarios.

[rarkins]

@soenkeliebau looking good.. can you reproduce the scenario where it "pins" the action? I think you'll need an unpinned action with version, plus pinDigests enabled

[soenkeliebau]

@soenkeliebau looking good.. can you reproduce the scenario where it "pins" the action? I think you'll need an unpinned action with version, plus pinDigests enabled

Sorry, should have mentioned that, I did that to get a baseline for those PRs. This commit: soenkeliebau/renovate-test@a396546 was generated by Renovate.
Or well... to be precise, Renovate generated the branch, I created the PR because I had renovate configured wrong and it didn't create the PR itself.

[renovate-release]

🎉 This PR is included in version 31.72.0 🎉

The release is available on:

• GitHub release
• 31.72.0

Your semantic-release bot 📦🚀