If Renovate is used for dependency updates, find and update the configuration if needed:

• If the json config has "config:recommended" under the "extends" node, then replace that with "config:best-practices".
• If the json config doesn't have "helpers:pinGitHubActionDigestsToSemver" under the "extends" node, then add that.

Don't make any other changes.

If Renovate isn't already used for dependency updates (no renovate json file found), do nothing.

related to https://scorecard.dev/viewer/?uri=github.com/open-telemetry/opentelemetry-java-examples