Skip to content

chore(deps): Bump pnpm/action-setup from a8198c4bff370c8506180b035930dea56dbd5288 to fc06bc1257f339d1d5d8b3a19a8cae5388b55320#15

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/pnpm/action-setup-fc06bc1257f339d1d5d8b3a19a8cae5388b55320
Closed

chore(deps): Bump pnpm/action-setup from a8198c4bff370c8506180b035930dea56dbd5288 to fc06bc1257f339d1d5d8b3a19a8cae5388b55320#15
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/pnpm/action-setup-fc06bc1257f339d1d5d8b3a19a8cae5388b55320

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 11, 2026

Bumps pnpm/action-setup from a8198c4bff370c8506180b035930dea56dbd5288 to fc06bc1257f339d1d5d8b3a19a8cae5388b55320.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • Chores
    • Updated continuous integration workflow tooling to enhance build reliability and performance.

Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from a8198c4bff370c8506180b035930dea56dbd5288 to fc06bc1257f339d1d5d8b3a19a8cae5388b55320.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@a8198c4...fc06bc1)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: fc06bc1257f339d1d5d8b3a19a8cae5388b55320
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 11, 2026
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Apr 11, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 12e59005-d4f3-4f89-af43-c5598953cac4

📥 Commits

Reviewing files that changed from the base of the PR and between 984614d and b10c896.

📒 Files selected for processing (1)
  • .github/workflows/ci.yml

📝 Walkthrough

Walkthrough

The CI workflow was updated to use a newer version of the pnpm setup action across four jobs (check, unit, integration, e2e), replacing an action commit hash while maintaining the existing tag version designation.

Changes

Cohort / File(s) Summary
CI Workflow Configuration
.github/workflows/ci.yml
Updated pnpm setup action commit reference in four jobs (check, unit, integration, e2e) from a8198c4bff370c8506180b035930dea56dbd5288 to fc06bc1257f339d1d5d8b3a19a8cae5388b55320 with tag comment # v5 preserved.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 A whisker twitch, a hop, hooray!
Our pnpm flows the better way,
New commits dance through the CI,
With v5's charm, we reach the sky!

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: updating a GitHub Actions dependency (pnpm/action-setup) with the specific commit hashes involved.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/github_actions/pnpm/action-setup-fc06bc1257f339d1d5d8b3a19a8cae5388b55320

Comment @coderabbitai help to get the list of available commands and usage tips.

iskhakovt pushed a commit that referenced this pull request Apr 12, 2026
v6 adds pnpm v11 support and runs on Node.js 24. Replaces
Dependabot's confusing SHA-to-SHA PR (#15) with a clean version
bump. Close #15 after merging.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@iskhakovt
Copy link
Copy Markdown
Owner

Superseded by #31 which bumps directly to v6.0.0 instead of the confusing SHA-to-SHA update.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 12, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/github_actions/pnpm/action-setup-fc06bc1257f339d1d5d8b3a19a8cae5388b55320 branch April 12, 2026 10:44
iskhakovt pushed a commit that referenced this pull request Apr 12, 2026
v6 adds pnpm v11 support and runs on Node.js 24. Replaces
Dependabot's confusing SHA-to-SHA PR (#15) with a clean version
bump.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
iskhakovt added a commit that referenced this pull request Apr 25, 2026
* chore(deps): bump pnpm/action-setup from v5 to v6

v6 adds pnpm v11 support and runs on Node.js 24. Replaces
Dependabot's confusing SHA-to-SHA PR (#15) with a clean version
bump.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* chore(deps): bump pnpm/action-setup from v6.0.0 to v6.0.3

Fixes the pnpm version input being ignored (v6.0.2 included the PATH
precedence fix from pnpm/action-setup#230).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* chore(ci): pin action version comments to exact patch versions

Dependabot and Renovate can track and auto-update SHA pins when the
comment contains the exact semantic version (e.g. # v6.0.3 instead of
# v6). Updated all action comments in ci.yml and publish.yml.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Timur Iskhakov <ti@timur.is>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant