diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3e3afa6e..9ed466f7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,20 +23,20 @@ jobs:
     steps:
       # Checkout
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
       # Setup
       - name: Set up GraalVM
-        uses: graalvm/setup-graalvm@60c26726de13f8b90771df4bc1641a52a3159994 # v1
+        uses: graalvm/setup-graalvm@60c26726de13f8b90771df4bc1641a52a3159994 # v1.5.2
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: "graalvm"
           cache: "maven"
 
       - name: Set up NodeJS cache
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           cache: "npm"
           cache-dependency-path: 'commafeed-client/package-lock.json'
@@ -73,20 +73,20 @@ jobs:
 
       # Upload artifacts
       - name: Upload cross-platform app
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         if: matrix.os == 'ubuntu-latest' # we only need to upload the cross-platform artifact once per database
         with:
           name: commafeed-${{ matrix.database }}-jvm
           path: commafeed-server/target/commafeed-*.zip
 
       - name: Upload native executable
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: commafeed-${{ matrix.database }}-${{ runner.os }}-${{ runner.arch }}
           path: commafeed-server/target/commafeed-*-runner*
 
       - name: Upload pages
-        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
         if: matrix.os == 'ubuntu-latest' && matrix.database == 'h2' # we only need to upload the pages once
         with:
           path: target/pages
@@ -104,23 +104,23 @@ jobs:
     steps:
       # Checkout
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
       # Setup
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
+        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
 
       - name: Install required packages
         run: sudo apt-get install -y rename unzip
 
       # Prepare artifacts
       - name: Download artifacts
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           pattern: commafeed-${{ matrix.database }}-*
           path: ./artifacts
@@ -141,7 +141,7 @@ jobs:
 
       # Docker
       - name: Login to Container Registry
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: ${{ env.DOCKERHUB_USERNAME != '' }}
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
@@ -149,7 +149,7 @@ jobs:
 
       ## build but don't push for PRs and renovate
       - name: Docker build - native
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         with:
           context: .
           file: commafeed-server/src/main/docker/Dockerfile.native
@@ -157,7 +157,7 @@ jobs:
           platforms: linux/amd64,linux/arm64/v8
 
       - name: Docker build - jvm
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         with:
           context: .
           file: commafeed-server/src/main/docker/Dockerfile.jvm
@@ -166,7 +166,7 @@ jobs:
 
       ## build and push tag
       - name: Docker build and push tag - native
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         if: ${{ github.ref_type == 'tag' }}
         with:
           context: .
@@ -178,7 +178,7 @@ jobs:
             athou/commafeed:${{ github.ref_name }}-${{ matrix.database }}
 
       - name: Docker build and push tag - jvm
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         if: ${{ github.ref_type == 'tag' }}
         with:
           context: .
@@ -191,7 +191,7 @@ jobs:
 
       ## build and push master
       - name: Docker build and push master - native
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         if: ${{ github.ref_name == 'master' }}
         with:
           context: .
@@ -201,7 +201,7 @@ jobs:
           tags: athou/commafeed:master-${{ matrix.database }}
 
       - name: Docker build and push master - jvm
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         if: ${{ github.ref_name == 'master' }}
         with:
           context: .
@@ -221,12 +221,12 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
       - name: Download artifacts
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           pattern: commafeed-*
           path: ./artifacts
@@ -236,13 +236,13 @@ jobs:
         run: chmod +x artifacts/*-runner
 
       - name: Extract Changelog Entry
-        uses: mindsers/changelog-reader-action@32aa5b4c155d76c94e4ec883a223c947b2f02656 # v2
+        uses: mindsers/changelog-reader-action@32aa5b4c155d76c94e4ec883a223c947b2f02656 # v2.2.3
         id: changelog_reader
         with:
           version: ${{ github.ref_name }}
 
       - name: Create GitHub release
-        uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1
+        uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1.21.0
         with:
           name: CommaFeed ${{ github.ref_name }}
           body: ${{ steps.changelog_reader.outputs.changes }}
@@ -255,12 +255,12 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
       - name: Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5
+        uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -280,5 +280,5 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
 
     steps:
-      - uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5
+      - uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
         id: deployment
diff --git a/commafeed-client/package-lock.json b/commafeed-client/package-lock.json
index 9af1295f..e922e9b8 100644
--- a/commafeed-client/package-lock.json
+++ b/commafeed-client/package-lock.json
@@ -8,67 +8,67 @@
             "name": "commafeed-client",
             "version": "0.0.0",
             "dependencies": {
-                "@emotion/react": "^11.14.0",
-                "@fontsource/open-sans": "^5.2.7",
-                "@lingui/core": "^5.9.5",
-                "@lingui/react": "^5.9.5",
-                "@mantine/core": "^9.0.1",
-                "@mantine/form": "^9.0.1",
-                "@mantine/hooks": "^9.0.1",
-                "@mantine/modals": "^9.0.1",
-                "@mantine/notifications": "^9.0.1",
-                "@mantine/spotlight": "^9.0.1",
-                "@monaco-editor/react": "^4.7.0",
-                "@react-querybuilder/mantine": "^8.14.4",
-                "@reduxjs/toolkit": "^2.11.2",
-                "@rolldown/plugin-babel": "^0.2.2",
-                "axios": "^1.15.0",
-                "dayjs": "^1.11.20",
-                "escape-string-regexp": "^5.0.0",
-                "interweave": "^13.1.1",
-                "monaco-editor": "^0.55.1",
-                "mousetrap": "^1.6.5",
-                "react": "^19.2.5",
-                "react-async-hook": "^4.0.0",
-                "react-contexify": "^6.0.0",
-                "react-dom": "^19.2.5",
-                "react-draggable": "^4.5.0",
-                "react-icons": "^5.6.0",
-                "react-infinite-scroller": "^1.2.6",
-                "react-querybuilder": "^8.14.4",
-                "react-redux": "^9.2.0",
-                "react-router-dom": "^7.14.0",
-                "react-swipeable": "^7.0.2",
-                "style-to-object": "^1.0.14",
-                "throttle-debounce": "^5.0.2",
-                "tinycon": "^0.6.8",
-                "tss-react": "^4.9.20",
-                "websocket-heartbeat-js": "^1.1.3"
+                "@emotion/react": "11.14.0",
+                "@fontsource/open-sans": "5.2.7",
+                "@lingui/core": "5.9.5",
+                "@lingui/react": "5.9.5",
+                "@mantine/core": "9.0.1",
+                "@mantine/form": "9.0.1",
+                "@mantine/hooks": "9.0.1",
+                "@mantine/modals": "9.0.1",
+                "@mantine/notifications": "9.0.1",
+                "@mantine/spotlight": "9.0.1",
+                "@monaco-editor/react": "4.7.0",
+                "@react-querybuilder/mantine": "8.14.4",
+                "@reduxjs/toolkit": "2.11.2",
+                "@rolldown/plugin-babel": "0.2.2",
+                "axios": "1.15.0",
+                "dayjs": "1.11.20",
+                "escape-string-regexp": "5.0.0",
+                "interweave": "13.1.1",
+                "monaco-editor": "0.55.1",
+                "mousetrap": "1.6.5",
+                "react": "19.2.5",
+                "react-async-hook": "4.0.0",
+                "react-contexify": "6.0.0",
+                "react-dom": "19.2.5",
+                "react-draggable": "4.5.0",
+                "react-icons": "5.6.0",
+                "react-infinite-scroller": "1.2.6",
+                "react-querybuilder": "8.14.4",
+                "react-redux": "9.2.0",
+                "react-router-dom": "7.14.0",
+                "react-swipeable": "7.0.2",
+                "style-to-object": "1.0.14",
+                "throttle-debounce": "5.0.2",
+                "tinycon": "0.6.8",
+                "tss-react": "4.9.20",
+                "websocket-heartbeat-js": "1.1.3"
             },
             "devDependencies": {
-                "@biomejs/biome": "^2.4.11",
-                "@lingui/babel-plugin-lingui-macro": "^5.9.5",
-                "@lingui/cli": "^5.9.5",
-                "@lingui/vite-plugin": "^5.9.5",
-                "@testing-library/jest-dom": "^6.9.1",
-                "@testing-library/react": "^16.3.2",
-                "@testing-library/user-event": "^14.6.1",
-                "@types/mousetrap": "^1.6.15",
-                "@types/react": "^19.2.14",
-                "@types/react-dom": "^19.2.3",
-                "@types/react-infinite-scroller": "^1.2.5",
-                "@types/throttle-debounce": "^5.0.2",
-                "@types/tinycon": "^0.6.7",
-                "@vitejs/plugin-react": "^6.0.1",
+                "@biomejs/biome": "2.4.11",
+                "@lingui/babel-plugin-lingui-macro": "5.9.5",
+                "@lingui/cli": "5.9.5",
+                "@lingui/vite-plugin": "5.9.5",
+                "@testing-library/jest-dom": "6.9.1",
+                "@testing-library/react": "16.3.2",
+                "@testing-library/user-event": "14.6.1",
+                "@types/mousetrap": "1.6.15",
+                "@types/react": "19.2.14",
+                "@types/react-dom": "19.2.3",
+                "@types/react-infinite-scroller": "1.2.5",
+                "@types/throttle-debounce": "5.0.2",
+                "@types/tinycon": "0.6.7",
+                "@vitejs/plugin-react": "6.0.1",
                 "babel-plugin-react-compiler": "1.0.0",
-                "husky": "^9.1.7",
-                "jsdom": "^29.0.2",
-                "lint-staged": "^16.4.0",
-                "typescript": "^6.0.2",
-                "vite": "^8.0.8",
-                "vite-plugin-checker": "^0.12.0",
-                "vitest": "^4.1.4",
-                "yaml": "^2.8.3"
+                "husky": "9.1.7",
+                "jsdom": "29.0.2",
+                "lint-staged": "16.4.0",
+                "typescript": "6.0.2",
+                "vite": "8.0.8",
+                "vite-plugin-checker": "0.12.0",
+                "vitest": "4.1.4",
+                "yaml": "2.8.3"
             }
         },
         "node_modules/@adobe/css-tools": {
@@ -419,9 +419,6 @@
                 "arm64"
             ],
             "dev": true,
-            "libc": [
-                "glibc"
-            ],
             "license": "MIT OR Apache-2.0",
             "optional": true,
             "os": [
@@ -439,9 +436,6 @@
                 "arm64"
             ],
             "dev": true,
-            "libc": [
-                "musl"
-            ],
             "license": "MIT OR Apache-2.0",
             "optional": true,
             "os": [
@@ -459,9 +453,6 @@
                 "x64"
             ],
             "dev": true,
-            "libc": [
-                "glibc"
-            ],
             "license": "MIT OR Apache-2.0",
             "optional": true,
             "os": [
@@ -479,9 +470,6 @@
                 "x64"
             ],
             "dev": true,
-            "libc": [
-                "musl"
-            ],
             "license": "MIT OR Apache-2.0",
             "optional": true,
             "os": [
@@ -2025,9 +2013,6 @@
             "cpu": [
                 "arm64"
             ],
-            "libc": [
-                "glibc"
-            ],
             "license": "MIT",
             "optional": true,
             "os": [
@@ -2044,9 +2029,6 @@
             "cpu": [
                 "arm64"
             ],
-            "libc": [
-                "musl"
-            ],
             "license": "MIT",
             "optional": true,
             "os": [
@@ -2063,9 +2045,6 @@
             "cpu": [
                 "ppc64"
             ],
-            "libc": [
-                "glibc"
-            ],
             "license": "MIT",
             "optional": true,
             "os": [
@@ -2082,9 +2061,6 @@
             "cpu": [
                 "s390x"
             ],
-            "libc": [
-                "glibc"
-            ],
             "license": "MIT",
             "optional": true,
             "os": [
@@ -2101,9 +2077,6 @@
             "cpu": [
                 "x64"
             ],
-            "libc": [
-                "glibc"
-            ],
             "license": "MIT",
             "optional": true,
             "os": [
@@ -2120,9 +2093,6 @@
             "cpu": [
                 "x64"
             ],
-            "libc": [
-                "musl"
-            ],
             "license": "MIT",
             "optional": true,
             "os": [
@@ -4530,9 +4500,6 @@
             "cpu": [
                 "arm64"
             ],
-            "libc": [
-                "glibc"
-            ],
             "license": "MPL-2.0",
             "optional": true,
             "os": [
@@ -4553,9 +4520,6 @@
             "cpu": [
                 "arm64"
             ],
-            "libc": [
-                "musl"
-            ],
             "license": "MPL-2.0",
             "optional": true,
             "os": [
@@ -4576,9 +4540,6 @@
             "cpu": [
                 "x64"
             ],
-            "libc": [
-                "glibc"
-            ],
             "license": "MPL-2.0",
             "optional": true,
             "os": [
@@ -4599,9 +4560,6 @@
             "cpu": [
                 "x64"
             ],
-            "libc": [
-                "musl"
-            ],
             "license": "MPL-2.0",
             "optional": true,
             "os": [
diff --git a/commafeed-client/package.json b/commafeed-client/package.json
index 580d8364..29c87728 100644
--- a/commafeed-client/package.json
+++ b/commafeed-client/package.json
@@ -16,71 +16,71 @@
         "prepare": "cd .. && husky ./commafeed-client/.husky"
     },
     "dependencies": {
-        "@emotion/react": "^11.14.0",
-        "@fontsource/open-sans": "^5.2.7",
-        "@lingui/core": "^5.9.5",
-        "@lingui/react": "^5.9.5",
-        "@mantine/core": "^9.0.1",
-        "@mantine/form": "^9.0.1",
-        "@mantine/hooks": "^9.0.1",
-        "@mantine/modals": "^9.0.1",
-        "@mantine/notifications": "^9.0.1",
-        "@mantine/spotlight": "^9.0.1",
-        "@monaco-editor/react": "^4.7.0",
-        "@react-querybuilder/mantine": "^8.14.4",
-        "@reduxjs/toolkit": "^2.11.2",
-        "@rolldown/plugin-babel": "^0.2.2",
-        "axios": "^1.15.0",
-        "dayjs": "^1.11.20",
-        "escape-string-regexp": "^5.0.0",
-        "interweave": "^13.1.1",
-        "monaco-editor": "^0.55.1",
-        "mousetrap": "^1.6.5",
-        "react": "^19.2.5",
-        "react-async-hook": "^4.0.0",
-        "react-contexify": "^6.0.0",
-        "react-dom": "^19.2.5",
-        "react-draggable": "^4.5.0",
-        "react-icons": "^5.6.0",
-        "react-infinite-scroller": "^1.2.6",
-        "react-querybuilder": "^8.14.4",
-        "react-redux": "^9.2.0",
-        "react-router-dom": "^7.14.0",
-        "react-swipeable": "^7.0.2",
-        "style-to-object": "^1.0.14",
-        "throttle-debounce": "^5.0.2",
-        "tinycon": "^0.6.8",
-        "tss-react": "^4.9.20",
-        "websocket-heartbeat-js": "^1.1.3"
+        "@emotion/react": "11.14.0",
+        "@fontsource/open-sans": "5.2.7",
+        "@lingui/core": "5.9.5",
+        "@lingui/react": "5.9.5",
+        "@mantine/core": "9.0.1",
+        "@mantine/form": "9.0.1",
+        "@mantine/hooks": "9.0.1",
+        "@mantine/modals": "9.0.1",
+        "@mantine/notifications": "9.0.1",
+        "@mantine/spotlight": "9.0.1",
+        "@monaco-editor/react": "4.7.0",
+        "@react-querybuilder/mantine": "8.14.4",
+        "@reduxjs/toolkit": "2.11.2",
+        "@rolldown/plugin-babel": "0.2.2",
+        "axios": "1.15.0",
+        "dayjs": "1.11.20",
+        "escape-string-regexp": "5.0.0",
+        "interweave": "13.1.1",
+        "monaco-editor": "0.55.1",
+        "mousetrap": "1.6.5",
+        "react": "19.2.5",
+        "react-async-hook": "4.0.0",
+        "react-contexify": "6.0.0",
+        "react-dom": "19.2.5",
+        "react-draggable": "4.5.0",
+        "react-icons": "5.6.0",
+        "react-infinite-scroller": "1.2.6",
+        "react-querybuilder": "8.14.4",
+        "react-redux": "9.2.0",
+        "react-router-dom": "7.14.0",
+        "react-swipeable": "7.0.2",
+        "style-to-object": "1.0.14",
+        "throttle-debounce": "5.0.2",
+        "tinycon": "0.6.8",
+        "tss-react": "4.9.20",
+        "websocket-heartbeat-js": "1.1.3"
     },
     "devDependencies": {
-        "@biomejs/biome": "^2.4.11",
-        "@lingui/babel-plugin-lingui-macro": "^5.9.5",
-        "@lingui/cli": "^5.9.5",
-        "@lingui/vite-plugin": "^5.9.5",
-        "@testing-library/jest-dom": "^6.9.1",
-        "@testing-library/react": "^16.3.2",
-        "@testing-library/user-event": "^14.6.1",
-        "@types/mousetrap": "^1.6.15",
-        "@types/react": "^19.2.14",
-        "@types/react-dom": "^19.2.3",
-        "@types/react-infinite-scroller": "^1.2.5",
-        "@types/throttle-debounce": "^5.0.2",
-        "@types/tinycon": "^0.6.7",
-        "@vitejs/plugin-react": "^6.0.1",
+        "@biomejs/biome": "2.4.11",
+        "@lingui/babel-plugin-lingui-macro": "5.9.5",
+        "@lingui/cli": "5.9.5",
+        "@lingui/vite-plugin": "5.9.5",
+        "@testing-library/jest-dom": "6.9.1",
+        "@testing-library/react": "16.3.2",
+        "@testing-library/user-event": "14.6.1",
+        "@types/mousetrap": "1.6.15",
+        "@types/react": "19.2.14",
+        "@types/react-dom": "19.2.3",
+        "@types/react-infinite-scroller": "1.2.5",
+        "@types/throttle-debounce": "5.0.2",
+        "@types/tinycon": "0.6.7",
+        "@vitejs/plugin-react": "6.0.1",
         "babel-plugin-react-compiler": "1.0.0",
-        "husky": "^9.1.7",
-        "jsdom": "^29.0.2",
-        "lint-staged": "^16.4.0",
-        "typescript": "^6.0.2",
-        "vite": "^8.0.8",
-        "vite-plugin-checker": "^0.12.0",
-        "vitest": "^4.1.4",
-        "yaml": "^2.8.3"
+        "husky": "9.1.7",
+        "jsdom": "29.0.2",
+        "lint-staged": "16.4.0",
+        "typescript": "6.0.2",
+        "vite": "8.0.8",
+        "vite-plugin-checker": "0.12.0",
+        "vitest": "4.1.4",
+        "yaml": "2.8.3"
     },
     "overrides": {
         "react-infinite-scroller": {
-            "react": "^19.2.5"
+            "react": "19.2.5"
         }
     }
 }
diff --git a/renovate.json b/renovate.json
index fd7bb3b0..7a054ed9 100644
--- a/renovate.json
+++ b/renovate.json
@@ -8,6 +8,7 @@
     ":automergeDigest",
     ":automergeBranch",
     ":automergeRequireAllStatusChecks",
+    ":pinVersions",
     ":maintainLockFilesWeekly"
   ],
   "packageRules": [