Skip to content

chore(deps): bump pnpm/action-setup from 6.0.8 to 6.0.9 - #4548

Merged
turip merged 1 commit into
mainfrom
dependabot/github_actions/pnpm/action-setup-6.0.9
Jun 25, 2026
Merged

chore(deps): bump pnpm/action-setup from 6.0.8 to 6.0.9#4548
turip merged 1 commit into
mainfrom
dependabot/github_actions/pnpm/action-setup-6.0.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps pnpm/action-setup from 6.0.8 to 6.0.9.

Release notes

Sourced from pnpm/action-setup's releases.

v6.0.9

What's Changed

Full Changelog: pnpm/action-setup@v6...v6.0.9

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added area/dependencies Pull requests that update a dependency file dependency/github_actions Pull requests that update GitHub Actions code release-note/ignore Ignore this change when generating release notes labels Jun 22, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 22, 2026 05:05
@greptile-apps

greptile-apps Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

This PR bumps pnpm/action-setup from v6.0.8 to v6.0.9 across three GitHub Actions workflows. The only change is updating the pinned commit SHA to 0ebf471, which bundles pnpm v11.7.0 inside the action.

  • Updated SHA in .github/workflows/ci.yaml, .github/workflows/aip-npm-release.yaml, and .github/workflows/npm-release.yaml — all three sites are consistent.
  • The # v6 comment is preserved on each step, which correctly reflects the major version series.

Confidence Score: 5/5

Safe to merge — purely a SHA bump of a GitHub Actions helper with no logic changes.

All three workflow files receive the same one-line SHA update, the new commit is the official upstream release, and the pinned-SHA supply-chain pattern is preserved throughout.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/aip-npm-release.yaml Updates pnpm/action-setup commit SHA from 6.0.8 to 6.0.9 (no other changes)
.github/workflows/ci.yaml Updates pnpm/action-setup commit SHA from 6.0.8 to 6.0.9 (no other changes)
.github/workflows/npm-release.yaml Updates pnpm/action-setup commit SHA from 6.0.8 to 6.0.9 (no other changes)

Flowchart

 
%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Dependabot] -->|bumps SHA| B[pnpm/action-setup]
    B --> C[aip-npm-release.yaml]
    B --> D[ci.yaml]
    B --> E[npm-release.yaml]
    C --> F[0e279bb → 0ebf471]
    D --> F
    E --> F
    F --> G[pnpm v11.7.0 bundled in action]
Loading 
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    A[Dependabot] -->|bumps SHA| B[pnpm/action-setup]
    B --> C[aip-npm-release.yaml]
    B --> D[ci.yaml]
    B --> E[npm-release.yaml]
    C --> F[0e279bb → 0ebf471]
    D --> F
    E --> F
    F --> G[pnpm v11.7.0 bundled in action]
Loading

Reviews (1): Last reviewed commit: "chore(deps): bump pnpm/action-setup from..." | Re-trigger Greptile

@dependabot @turip
chore(deps): bump pnpm/action-setup from 6.0.8 to 6.0.9
4a5db5c 
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 6.0.8 to 6.0.9.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@0e279bb...0ebf471)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@turip
turip force-pushed the dependabot/github_actions/pnpm/action-setup-6.0.9 branch from 7f5d956 to 4a5db5c Compare June 25, 2026 20:27
turip
turip approved these changes Jun 25, 2026
View reviewed changes

@turip turip left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Workflow-only Dependabot update; rebased on current origin/main.

@turip
turip enabled auto-merge (squash) June 25, 2026 20:27
@turip
turip merged commit aa2b4b0 into main Jun 25, 2026
26 checks passed
@turip
turip deleted the dependabot/github_actions/pnpm/action-setup-6.0.9 branch June 25, 2026 20:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@turip turip turip approved these changes

Assignees

No one assigned

Labels

area/dependencies Pull requests that update a dependency file dependency/github_actions Pull requests that update GitHub Actions code release-note/ignore Ignore this change when generating release notes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@turip