diff --git a/renovate.json b/renovate.json
index 63fc54d..eaf52f8 100644
--- a/renovate.json
+++ b/renovate.json
@@ -71,14 +71,18 @@
       "matchPackageNames": ["thecatlady/webhook"],
       "allowedVersions": "^2\\.8\\."
     },
-    {
-      "matchDatasources": ["github-actions"],
-      "matchPackageNames": ["actions/checkout", "supplypike/setup-bin"],
-      "allowedVersions": "^v4$"
-    },
     {
       "matchUpdateTypes": ["patch"],
       "schedule": ["every weekday"]
+    },
+    {
+      "matchManagers": ["github-actions"],
+      "matchPackageNames": [
+        "actions/checkout",
+        "supplypike/setup-bin"
+      ],
+      "allowedVersions": "^4.0.0",
+      "groupName": "github-actions (pinned to v4)"
     }
   ],
   "regexManagers": [