Skip to content

chore(deps): bump the actions group across 1 directory with 3 updates#603

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-d490db2a47
Open

chore(deps): bump the actions group across 1 directory with 3 updates#603
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-d490db2a47

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 13, 2026

Bumps the actions group with 3 updates in the / directory: rharkor/caching-for-turbo, pnpm/action-setup and actions/github-script.

Updates rharkor/caching-for-turbo from 2.3.11 to 2.3.13

Release notes

Sourced from rharkor/caching-for-turbo's releases.

v2.3.13

2.3.13 (2026-04-11)

Documentation

Miscellaneous Chores

  • sync: restore package.json from main (8ce1c7e)

v2.3.12

2.3.12 (2026-04-11)

Bug Fixes

  • deps (e8f53c4)
  • deps: update dependency @​actions/cache to v6 (9b21c2a)
  • deps: update dependency @​actions/core to v3 (10e99b5)
  • ts package (7861008)

Miscellaneous Chores

  • bump node (9e9ff61)
  • deps: update aws-sdk-js-v3 monorepo to v3.1000.0 (#802) (992c329)
  • deps: update aws-sdk-js-v3 monorepo to v3.1001.0 (#808) (55fe73f)
  • deps: update aws-sdk-js-v3 monorepo to v3.1002.0 (#809) (f0f34b1)
  • deps: update aws-sdk-js-v3 monorepo to v3.1003.0 (#812) (d1ba13f)
  • deps: update aws-sdk-js-v3 monorepo to v3.1004.0 (#817) (caf6518)
  • deps: update aws-sdk-js-v3 monorepo to v3.1005.0 (#820) (db9f150)
  • deps: update aws-sdk-js-v3 monorepo to v3.1006.0 (#823) (72147bb)
  • deps: update aws-sdk-js-v3 monorepo to v3.1007.0 (#826) (db29c13)
  • deps: update aws-sdk-js-v3 monorepo to v3.1008.0 (#828) (4bbbd56)
  • deps: update aws-sdk-js-v3 monorepo to v3.1009.0 (#831) (743bdb1)
  • deps: update aws-sdk-js-v3 monorepo to v3.1010.0 (#833) (176bbd8)
  • deps: update aws-sdk-js-v3 monorepo to v3.1011.0 (#834) (d957774)
  • deps: update aws-sdk-js-v3 monorepo to v3.1012.0 (#836) (b7c7010)
  • deps: update aws-sdk-js-v3 monorepo to v3.1013.0 (#840) (947ef31)
  • deps: update aws-sdk-js-v3 monorepo to v3.1014.0 (#841) (ec9ce5e)
  • deps: update aws-sdk-js-v3 monorepo to v3.1021.0 (#848) (d8dc7df)
  • deps: update aws-sdk-js-v3 monorepo to v3.1022.0 (#854) (e0852ac)
  • deps: update aws-sdk-js-v3 monorepo to v3.1023.0 (#856) (2181092)
  • deps: update aws-sdk-js-v3 monorepo to v3.1024.0 (#859) (138f946)
  • deps: update aws-sdk-js-v3 monorepo to v3.1025.0 (#862) (355236d)
  • deps: update aws-sdk-js-v3 monorepo to v3.1026.0 (#865) (6ecb4cc)
  • deps: update aws-sdk-js-v3 monorepo to v3.1027.0 (#867) (cfb6e0d)
  • deps: update aws-sdk-js-v3 monorepo to v3.1028.0 (#868) (56819b2)
  • deps: update aws-sdk-js-v3 monorepo to v3.1029.0 (#873) (72dc7b2)
  • deps: update aws-sdk-js-v3 monorepo to v3.972.0 (#738) (6b26370)
  • deps: update aws-sdk-js-v3 monorepo to v3.974.0 (#741) (e67b8ac)

... (truncated)

Commits
  • 00a0515 chore(release): 2.3.13 [skip ci]
  • 8ce1c7e chore(sync): restore package.json from main
  • 5ca2738 Merge remote-tracking branch 'origin/main' into main-release
  • 31208d4 Merge branch 'dev'
  • 614e6fa docs: v
  • 69aec4f chore(release): 2.3.12 [skip ci]
  • 4fa2a44 chore(sync): restore package.json from main
  • 25d485e Merge remote-tracking branch 'origin/main' into main-release
  • 58c9ab7 Merge pull request #874 from rharkor/dev
  • 7861008 fix: ts package
  • Additional commits viewable in compare view

Updates pnpm/action-setup from 5 to 6

Release notes

Sourced from pnpm/action-setup's releases.

v6.0.0

Added support for pnpm v11.

Commits
  • 903f9c1 fix: update pnpm to 11.0.0-rc.5
  • bdf0af2 test: add strict version-match jobs to reproduce #225 / #227
  • 71c9247 fix: pnpm self-update binary shadowed by bootstrap on PATH (#230)
  • 078e9d4 fix: update pnpm to 11.0.0-rc.2
  • 08c4be7 docs(README): update action-setup version
  • 5798914 chore: update .gitignore
  • ddffd66 fix: remove accidentally committed file
  • b43f991 fix: update pnpm to 11.0.0-rc.0
  • 3852509 README.md: bring versions up-to-date (#222)
  • 6e7bdbd chore: bump bootstrap pnpm to 11.0.0-beta.4-1 and add update script
  • Additional commits viewable in compare view

Updates actions/github-script from 8 to 9

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

  • getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
  • Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

  • require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
  • getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
  • If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

New Contributors

Full Changelog: actions/github-script@v8.0.0...v9.0.0

Commits
  • 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
  • ca10bbd fix: use @​octokit/core/types import for v7 compatibility
  • 86e48e2 merge: incorporate main branch changes
  • c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
  • afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
  • ff8117e ci: fix user-agent test to handle orchestration ID
  • 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
  • 3953caf docs: update README examples from @​v8 to @​v9, add getOctokit docs and v9 brea...
  • c17d55b ci: add getOctokit integration test job
  • a047196 test: add getOctokit integration tests via callAsyncFunction
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 13, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented Apr 13, 2026

⚠️ No Changeset found

Latest commit: c7ffccb

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new Bot commented Apr 13, 2026

Open in StackBlitz

npm i https://pkg.pr.new/varlock@603
npm i https://pkg.pr.new/@varlock/cloudflare-integration@603

commit: c7ffccb

@dependabot dependabot Bot changed the title chore(deps): bump the actions group with 3 updates chore(deps): bump the actions group across 1 directory with 3 updates Apr 20, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-d490db2a47 branch from 16cf058 to f557fbc Compare April 20, 2026 15:48
Bumps the actions group with 3 updates: [rharkor/caching-for-turbo](https://github.com/rharkor/caching-for-turbo), [pnpm/action-setup](https://github.com/pnpm/action-setup) and [actions/github-script](https://github.com/actions/github-script).


Updates `rharkor/caching-for-turbo` from 2.3.11 to 2.3.13
- [Release notes](https://github.com/rharkor/caching-for-turbo/releases)
- [Commits](rharkor/caching-for-turbo@v2.3.11...v2.3.13)

Updates `pnpm/action-setup` from 5 to 6
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@v5...v6)

Updates `actions/github-script` from 8 to 9
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v8...v9)

---
updated-dependencies:
- dependency-name: rharkor/caching-for-turbo
  dependency-version: 2.3.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: pnpm/action-setup
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-d490db2a47 branch from f557fbc to c7ffccb Compare April 22, 2026 06:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

community dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants