From b47459a1aac8940933a374e3b39429be332056dc Mon Sep 17 00:00:00 2001
From: Joseph Ware <53935796+DiamondJoseph@users.noreply.github.com>
Date: Fri, 1 Aug 2025 09:27:10 +0100
Subject: [PATCH 1/2] fix: Temporarily pin the system test containers

---
 .github/workflows/_system_test.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/_system_test.yml b/.github/workflows/_system_test.yml
index e3c123ed00..9f297dde52 100644
--- a/.github/workflows/_system_test.yml
+++ b/.github/workflows/_system_test.yml
@@ -24,6 +24,7 @@ jobs:
         with:
           repository: epics-containers/example-services
           path: example-services
+          ref: '2025.8.1'
 
       - name: Run docker compose
         uses: hoverkraft-tech/compose-action@40041ff1b97dbf152cd2361138c2b03fa29139df # v2.3.0

From 77361c045924b4d2e68afa4816d787f582dd555b Mon Sep 17 00:00:00 2001
From: Joseph Ware <53935796+DiamondJoseph@users.noreply.github.com>
Date: Fri, 1 Aug 2025 09:40:03 +0100
Subject: [PATCH 2/2] fix: Enable Renovate to automate pinned actions/checkout

---
 renovate.json | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/renovate.json b/renovate.json
index d6d35d7b6e..5cc01c3c54 100644
--- a/renovate.json
+++ b/renovate.json
@@ -60,5 +60,20 @@
       ],
       "description": "Group non-major github action updates"
     }
+  ],
+  "customManagers": [
+    {
+      "customType": "regex",
+      "fileMatch": [
+        "^\\.github/workflows/[^/]+\\.ya?ml$"
+      ],
+      "matchStringsStrategy": "combination",
+      "matchStrings": [
+        "uses: actions/checkout@v*\\s",
+        "repository: (?<depName>.*?)\\s",
+        "ref: (?<currentValue>.*?)\\s"
+      ],
+      "datasourceTemplate": "github-tags"
+    }
   ]
 }