Few, if any. Which is why I'm highlighting that you can't just use commit SHA + Renovate then call it a day.