build(deps): bump pnpm/action-setup from 6 to 6.0.9 - #43
Conversation
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 6 to 6.0.9. - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](pnpm/action-setup@v6...v6.0.9) --- updated-dependencies: - dependency-name: pnpm/action-setup dependency-version: 6.0.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #43 +/- ##
=========================================
Coverage 100.00% 100.00%
=========================================
Files 61 61
Lines 1801 1801
Branches 268 268
=========================================
Hits 1801 1801 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Consolidates the last three open Dependabot PRs into this branch and fixes the OSV-Scanner failure that was blocking CI on every branch, including scheduled runs on main. GitHub Actions bumps: - pnpm/action-setup v6 -> v6.0.9 (#43) - github/codeql-action v4 -> v4.37.4 (#44) - google/osv-scanner-action v2.3.8 -> v2.5.0 (#45) Security: - nanoid 3.3.16 -> 3.3.18, resolving GHSA-2v37-7h3g-55p8. The advisory is fixed in 3.3.18; the scanner's reported "fixed version" of 3.3.17 is inaccurate, confirmed against the OSV API affected ranges. nanoid is a transitive dev-only dep (postcss > nanoid) and is not shipped in the published package, which contains dist/ only. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018S1GGSmwCaX4Nvg9WgUC4a
|
Superseded by #42, which consolidates all six open dependency updates into a single PR along with the |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Bumps pnpm/action-setup from 6 to 6.0.9.
Release notes
Sourced from pnpm/action-setup's releases.
... (truncated)
Commits
62bce64fix: extract pnpm version from packageManager field instead of returning unde...58e6119feat!: replace bundled pnpm binary with npm + lockfile bootstrap (#212)2e223e0chore(workflows): adding pr-check.yaml to validate dist folder (#213)fc06bc1feat!: run the action on Node.js 24 (#205)b906affRevert "feat!: run the action on Node.js 24 (#205)"Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)