Properly separate node updates to fix label overlapping + pin only non-smartly actions

Author: sla686

renovate.json

@@ -59,7 +59,17 @@
       "matchDepTypes": ["devDependencies"],
       "matchUpdateTypes": ["major"],
       "labels": ["patch", "renovate-deps"]
-    }
+    },
+    {
+      "matchPackageNames": ["@types/node"],
+      "labels": ["no release", "renovate-deps"]
+    },
+    {
+      "description": "Pin third-party GitHub Actions to digest SHAs only; Smartly-owned actions stay tag-based (after catch-all pin rules so pinDigests is not overridden)",
+      "matchManagers": ["github-actions"],
+      "matchPackageNames": ["/^smartlyio\\//"],
+      "pinDigests": false
+    }   
   ],
   "github-actions": {
     "enabled": true,