When working with GitHub Actions, you may have encountered a Workflow that pins the digest of the Action being used: steps:- uses:release-drafter/release-drafter@09c613e259eb8d4e7c81c2cb00618eb5fc4575a7# v5 So how do you go about determining the digest? We definitely don't want to manually update these over time, and so instead want to outsource this to tools like Renovate and Dependabot, which understand i.e. the v5 means "keep this up-to-date with the latest v5.x release". For folks not awa...