From a731d2f8f3fa92febe0d9a87310a76575bf266e8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 10 May 2026 02:42:52 +0000 Subject: [PATCH] ci(actions): bump pnpm/action-setup from 4.3.0 to 6.0.6 Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4.3.0 to 6.0.6. - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/b906affcce14559ad1aafd4ab0e942779e9f58b1...91ab88e2619ed1f46221f0ba42d1492c02baf788) --- updated-dependencies: - dependency-name: pnpm/action-setup dependency-version: 6.0.6 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e405e6d..0a78796 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -18,7 +18,7 @@ jobs: # attacker run arbitrary code in our publish pipeline (which has the # OIDC token + npm Trusted Publisher access). - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.0.0 + - uses: pnpm/action-setup@91ab88e2619ed1f46221f0ba42d1492c02baf788 # v4.0.0 with: version: 10 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0