chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	pinDigest	-> a5ac7e5
actions/checkout	action	pinDigest	-> 692973e
actions/github-script	action	pinDigest	-> 60a0d83
eifinger/setup-rye	action	pinDigest	-> cba39b6
renovatebot/github-action	action	pinDigest	-> 76d4971

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone US/Eastern, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: .github/workflows/renovate.yml

Post-upgrade command 'rye sync' has not been added to the allowed list in allowedPostUpgradeCommands

File name: .github/workflows/ci.yml

Post-upgrade command 'rye sync' has not been added to the allowed list in allowedPostUpgradeCommands

File name: .github/workflows/ci.yml

Post-upgrade command 'rye sync' has not been added to the allowed list in allowedPostUpgradeCommands

File name: .github/workflows/ci.yml

Post-upgrade command 'rye sync' has not been added to the allowed list in allowedPostUpgradeCommands

File name: .github/workflows/renovate.yml

Post-upgrade command 'rye sync' has not been added to the allowed list in allowedPostUpgradeCommands

File name: .github/workflows/ci.yml

Post-upgrade command 'rye sync' has not been added to the allowed list in allowedPostUpgradeCommands

File name: .github/workflows/ci.yml

Post-upgrade command 'rye sync' has not been added to the allowed list in allowedPostUpgradeCommands

File name: .github/workflows/renovate.yml

Post-upgrade command 'rye sync' has not been added to the allowed list in allowedPostUpgradeCommands