renovate-bot Pin dependencies