fix: update matchPackageNames to exclude 'github' actions

[aladdin-add]

refs: eslint/eslint#20397 (comment)
This pull request makes a small update to the Renovate configuration for GitHub Actions dependencies. The change expands the exclusion pattern in the matchPackageNames field to also exclude github/** packages, not just actions/**.

• .github/renovate/base.json5: Updated the matchPackageNames pattern to exclude both actions/** and github/** when applying the deps:actions label for GitHub Actions dependencies.

Prerequisites checklist

• I have read the contributing guidelines.

What is the purpose of this pull request?

What changes did you make? (Give an overview)

Related Issues

Is there anything you'd like reviewers to focus on?

[aladdin-add]

should we also exclude "googleapis/*" - i think it's well-trusted too.

[Copilot]

Pull request overview

This PR updates the Renovate configuration to exclude both actions/** and github/** packages from having their GitHub Actions pinned to commit digests. This ensures that first-party GitHub Actions (from both the actions and github namespaces) remain unpinned, while third-party actions continue to be pinned for security purposes.

Key Changes

• Expanded the exclusion pattern in the "Pin 3rd-party actions" rule to include both actions/** and github/** namespaces

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[lumirlumir]

should we also exclude "googleapis/*" - i think it's well-trusted too.

Personally, I'm also +1 on excluding it. They're Google-owned actions, so I think that's fine.

But, if the TSC has a moment to review it, another confirmation would be helpful. @eslint/eslint-tsc