diff --git a/.github/renovate.json b/.github/renovate.json
index 03cea18d0e4..01be1ce5c2a 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -3,6 +3,7 @@
   "configMigration": true,
   "extends": [
     "config:recommended",
+    "helpers:pinGitHubActionDigests",
     "group:allNonMajor",
     "schedule:weekly",
     ":approveMajorUpdates",
diff --git a/.gitignore b/.gitignore
index a8970f3db84..72af44458df 100644
--- a/.gitignore
+++ b/.gitignore
@@ -59,6 +59,7 @@ ts-perf
 /examples/*/*/package-lock.json
 
 .netlify
+.vercel
 
 nx-cloud.env
 .nx/cache