Skip to content

chore(deps): bump pnpm/action-setup from 4.3.0 to 6.0.10 - #64

Merged
ulises-jeremias merged 1 commit into
mainfrom
dependabot/github_actions/pnpm/action-setup-6
Aug 26, 2026
Merged

chore(deps): bump pnpm/action-setup from 4.3.0 to 6.0.10#64
ulises-jeremias merged 1 commit into
mainfrom
dependabot/github_actions/pnpm/action-setup-6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor

Description

Updates pnpm/action-setup from v4 to v6.0.10 in the test and type-check workflows. The change is pinned to 0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 and keeps persist-credentials: false from the previous hardening. Validated against MegaLinter 10 and the repository's Node 24/pnpm 10 toolchain.

Type of Change

  • Dependency maintenance
  • Bug fix
  • New feature
  • Breaking change

How Has This Been Tested?

  • pnpm install --frozen-lockfile with the updated community Action
  • pnpm test --run (21 tests passed)
  • pnpm type-check (tsc --noEmit)
  • MegaLinter (javascript flavor v10.0.0) – all blocking linters pass locally
  • Remote CI on this PR: MegaLinter, test, type-check and pr-review

Checklist

  • My code follows the style guidelines of this project
  • I have performed a self-review of my code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings
  • Any dependent changes have been merged and published in downstream modules
  • I have checked my code and corrected any misspellings

@dependabot dependabot Bot added dependencies Dependency updates github_actions Pull requests that update GitHub Actions code labels Aug 26, 2026
@dependabot
dependabot Bot requested a review from ulises-jeremias as a code owner August 26, 2026 19:42
@dependabot dependabot Bot added dependencies Dependency updates github_actions Pull requests that update GitHub Actions code labels Aug 26, 2026
@vercel

vercel Bot commented Aug 26, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
website-3g7t Ready Ready Preview Aug 26, 2026 9:52pm

@github-actions

github-actions Bot commented Aug 26, 2026

Copy link
Copy Markdown
Messages
📖 Thanks! We ❤️ small PRs!

Generated by 🚫 dangerJS against bb70edb

@github-actions

github-actions Bot commented Aug 26, 2026

Copy link
Copy Markdown

⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Max errors Warnings Elapsed time
✅ ACTION actionlint 5 0 0 0.08s
✅ ACTION zizmor 5 0 0 2.03s
✅ BASH bash-exec 1 0 0 0.01s
✅ BASH shellcheck 1 0 0 0.22s
⚠️ BASH shfmt 1 1 0 0.01s
✅ COPYPASTE jscpd yes no no 2.27s
✅ EDITORCONFIG editorconfig-checker 176 0 0 0.5s
✅ JAVASCRIPT eslint 1 0 0 3.37s
✅ JAVASCRIPT standard 1 0 0 1.65s
✅ JSON jsonlint 10 0 0 0.14s
✅ JSON npm-package-json-lint yes no no 1.45s
✅ JSON prettier 10 0 0 0.66s
✅ JSON v8r 10 0 0 12.74s
✅ MARKDOWN markdownlint 10 0 0 0.94s
⚠️ MARKDOWN markdown-table-formatter 10 1 0 0.29s
✅ REPOSITORY betterleaks yes no no 1.05s
✅ REPOSITORY checkov yes no no 20.23s
✅ REPOSITORY git_diff yes no no 0.02s
✅ REPOSITORY osv-scanner yes no no 1.63s
✅ REPOSITORY secretlint yes no no 2.69s
✅ REPOSITORY trivy yes no no 17.63s
✅ REPOSITORY trufflehog yes no no 3.82s
✅ SPELL cspell 177 0 0 4.88s
✅ TSX eslint 100 0 0 4.68s
✅ YAML prettier 13 0 0 0.95s
✅ YAML yamllint 13 0 0 0.88s

Detailed Issues

⚠️ MARKDOWN / markdown-table-formatter - 1 error
1 files contain markdown tables to format:
- README.md
⚠️ BASH / shfmt - 1 error
diff public/install.sh.orig public/install.sh
--- public/install.sh.orig
+++ public/install.sh
@@ -25,7 +25,10 @@
 GITHUB_DOWNLOAD="${GITHUB_DOWNLOAD:-https://github.com}"
 
 info() { printf '%s\n' "$*" >&2; }
-die() { printf 'error: %s\n' "$*" >&2; exit 1; }
+die() {
+	printf 'error: %s\n' "$*" >&2
+	exit 1
+}
 
 need_cmd() {
 	command -v "$1" >/dev/null 2>&1 || die "required command not found: $1"

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@10.0.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,BASH_EXEC,BASH_SHELLCHECK,BASH_SHFMT,COPYPASTE_JSCPD,EDITORCONFIG_EDITORCONFIG_CHECKER,JAVASCRIPT_ES,JAVASCRIPT_STANDARD,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_TRIVY,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,TSX_ESLINT,YAML_PRETTIER,YAML_YAMLLINT

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/pnpm/action-setup-6 branch from fc4e846 to 8a58294 Compare August 26, 2026 19:45
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4.3.0 to 6.0.10.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@b906aff...0977fd9)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump pnpm/action-setup from 4 to 6 chore(deps): bump pnpm/action-setup from 4.3.0 to 6.0.10 Aug 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/pnpm/action-setup-6 branch from 8a58294 to bb70edb Compare August 26, 2026 21:51
@ulises-jeremias
ulises-jeremias merged commit f8beb1d into main Aug 26, 2026
7 of 8 checks passed
@ulises-jeremias
ulises-jeremias deleted the dependabot/github_actions/pnpm/action-setup-6 branch August 26, 2026 23:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant