fix: Remove extractVersion from matchUpdateTypes rules

[devin-ai-integration]

Summary

Removes extractVersion from the two GitHub Actions packageRules that also specify matchUpdateTypes. Renovate 43.x does not allow combining these two fields in the same rule, causing a config validation error that blocks all Renovate PRs.

The extractVersion field (^v(?<version>\d+\.\d+\.\d+)$) is no longer needed here — the github-actions manager in modern Renovate natively handles v-prefixed semver tags.

This same fix is being applied across all SDK repos (workos-dotnet, workos-python, workos-ruby, workos-php, workos-kotlin, workos-php-laravel, workos-go).

Review & Testing Checklist for Human

• Verify that the next Renovate run against this repo succeeds (check the Mend developer portal or trigger a manual run)
• Confirm that GitHub Actions digest-pinned dependencies still get properly versioned update PRs after this change

Notes

The root cause was the "Refactor GitHub Actions package rules in renovate.json" commit which moved extractVersion into rules that also had matchUpdateTypes — a combination Renovate 43.x rejects. The original standalone extractVersion rule (without matchUpdateTypes) was valid, but the refactored version is not.

Link to Devin session: https://app.devin.ai/sessions/8f92a2c219484c7a8123b098ba22aff0

[devin-ai-integration]

Original prompt from garen.torikian

›why is this issue happening across various repos? #1555, workos/workos-dotnet#231

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[greptile-apps]

Greptile Summary

This PR removes extractVersion from the two github-actions packageRules that also specify matchUpdateTypes, fixing a Renovate 43.x validation error that was blocking all Renovate PRs. The change is safe because the github-actions manager in modern Renovate natively handles v-prefixed semver tags without requiring an explicit extractVersion pattern.

Confidence Score: 5/5

Safe to merge — single-file config fix with no logic or security implications.

The change removes two extractVersion fields that were incompatible with matchUpdateTypes in Renovate 43.x. No code logic is touched, the resulting config is valid, and the native github-actions manager handles v-prefixed tags automatically. No P0 or P1 findings.

No files require special attention.

Important Files Changed

Filename	Overview
renovate.json	Removes extractVersion from the two github-actions package rules that combine it with matchUpdateTypes, resolving a Renovate 43.x config validation error. The resulting config is valid and functionally equivalent for modern Renovate.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Renovate detects update] --> B{matchManagers?}
    B -- github-actions --> C{matchUpdateTypes?}
    B -- other --> D{matchUpdateTypes?}
    C -- minor/patch/digest/pinDigest --> E[Group: github-actions-non-major\nautomerge: true]
    C -- major --> F[Group: github-actions-major\nautomerge: false]
    D -- minor/patch --> G[Group: minor and patch updates\nautomerge: true]
    D -- major --> H[automerge: false]
    D -- digest --> I[automerge: false]

Loading

_{Reviews (1): Last reviewed commit: "Remove extractVersion from matchUpdateTy..." | Re-trigger Greptile}