From b6a1697f639748aed36d817c0d4d5833ccff33d7 Mon Sep 17 00:00:00 2001
From: t8y2 <t8y2@users.noreply.github.com>
Date: Mon, 26 Oct 2026 11:39:45 +0800
Subject: [PATCH] chore(deps): stop renovate bumping win7-pinned tool inputs
 and pnpm

---
 renovate.json | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/renovate.json b/renovate.json
index 0615c48fe9..d8df005d47 100644
--- a/renovate.json
+++ b/renovate.json
@@ -128,6 +128,28 @@
       ],
       "enabled": false,
       "description": "pnpm comes from packageManager in package.json; the action-setup version input must not drift from it (#11932 rounds 1-6)"
+    },
+    {
+      "matchManagers": [
+        "github-actions"
+      ],
+      "matchPackageNames": [
+        "go",
+        "rust",
+        "sccache"
+      ],
+      "enabled": false,
+      "description": "uses-with tool inputs move only with deliberate toolchain bumps: Go 1.20.14 is the last Windows 7 release (#11926), sccache 0.19.0 breaks the win7 build-std rustc invocation with os error 206, and the nightly pin is keyed by WIN7_NIGHTLY_TOOLCHAIN for the prebuilt win7 artifacts (#13436)"
+    },
+    {
+      "matchManagers": [
+        "npm"
+      ],
+      "matchPackageNames": [
+        "pnpm"
+      ],
+      "enabled": false,
+      "description": "pnpm packageManager stays on the version the ci.yml action-setup steps pin (10.34.7); bump it manually together with those pins (#12479)"
     }
   ]
 }