Skip to content

chore(deps): pin dependencies - #85

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions-dependencies
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions-dependencies

Conversation

@renovate

@renovate renovate Bot commented Sep 14, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout action pin v6v6.1.0 age confidence
actions/checkout action pin v7v7.0.1 age confidence
actions/create-github-app-token action pin v3v3.2.0 age confidence
actions/setup-java action pin v5v5.7.0 age confidence
actions/setup-node action pin v6v6.5.0 age confidence
actions/upload-artifact action pin v4v4.6.2 age confidence
actions/upload-artifact action pin v5v5.0.0 age confidence
android-actions/setup-android action pin v4v4.0.1 age confidence
docker/build-push-action action pin v7v7.4.0 age confidence
docker/login-action action pin v4v4.6.0 age confidence
docker/setup-buildx-action action pin v4v4.4.1 age confidence
docker/setup-qemu-action action pin v4v4.4.0 age confidence
googleapis/release-please-action action pin v5v5.0.0 age confidence
java-jdk uses-with pin 2121.0.12+8.0.LTS age confidence
pnpm (source) uses-with patch 9.15.49.15.9 age confidence
pnpm/action-setup action pin v6v6.1.0 age confidence
r0adkll/upload-google-play action pin v1v1.1.5 age confidence
re-actors/alls-green action pinDigest b5b5b37

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.


Release Notes

pnpm/pnpm (pnpm)

v9.15.9: pnpm 9.15.9

Compare Source

Patch Changes

  • Fix running pnpm CLI from pnpm CLI on Windows when the CLI is bundled to an executable #​8971.

Platinum Sponsors

Bit Bit Syntax

Gold Sponsors

Discord u|screen
JetBrains Nx
CodeRabbit Route4Me
Workleap Stackblitz

v9.15.8: pnpm 9.15.8

Compare Source

Patch Changes

  • pnpm self-update should always update the version in the packageManager field of package.json.
  • The pnpm CLI process should not stay hanging, when --silent reporting is used.
  • When --loglevel is set to error, don't show installation summary, execution time, and big tarball download progress.
  • Don't show info output when --loglevel=error is used.

Platinum Sponsors

Bit Bit Syntax

Gold Sponsors

Discord u|screen
JetBrains Nx
CodeRabbit Route4Me
Workleap Stackblitz

v9.15.7: pnpm 9.15.7

Compare Source

Patch Changes

  • pnpm self-update should not leave a directory with a broken pnpm installation if the installation fails.
  • Allow scope registry CLI option without --config. prefix such as --@scope:registry=https://scope.example.com/npm #​9089.
  • pnpm self-update should not read the pnpm settings from the package.json file in the current working directory.
  • pnpm update -i should list only packages that have newer versions #​9206.
  • Fix a bug causing entries in the catalogs section of the pnpm-lock.yaml file to be removed when dedupe-peer-dependents=false on a filtered install. #​9112

Platinum Sponsors

Bit Bit Syntax

Gold Sponsors

Discord u|screen
JetBrains Nx
CodeRabbit Route4Me
Workleap Stackblitz

v9.15.6: pnpm 9.15.6

Compare Source

Patch Changes

  • Fix instruction for updating pnpm with corepack #​9101.
  • Print pnpm's version after the execution time at the end of the console output.
  • The pnpm version specified by packageManager cannot start with v.
  • Fix a bug causing catalog snapshots to be removed from the pnpm-lock.yaml file when using --fix-lockfile and --filter. #​8639
  • Fix a bug causing catalog protocol dependencies to not re-resolve on a filtered install #​8638.

v9.15.5: pnpm 9.15.5

Compare Source

Patch Changes

  • Verify that the package name is valid when executing the publish command.
  • When running pnpm install, the preprepare and postprepare scripts of the project should be executed #​8989.
  • Quote args for scripts with shell-quote to support new lines (on POSIX only) #​8980.
  • Proxy settings should be respected, when resolving Git-hosted dependencies #​6530.
  • Replace strip-ansi with the built-in util.stripVTControlCharacters #​9009.

Platinum Sponsors

Bit Bit Figma

Gold Sponsors

Discord Prisma
u|screen JetBrains
Nx CodeRabbit
Route4Me Workleap
Canva

Configuration

📅 Schedule: (in timezone Etc/UTC)

  • Branch creation
    • "after 02:00 and before 06:00 every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added area: tooling Reusable workflows, Gradle, templates, Renovate, and API tooling. component: dependencies Dependency update or dependency policy. dependencies Dependency update, lockfile change, or dependency policy. priority: P2 Medium; normal planned work. type: chore Maintenance work without intended behavior change. labels Sep 14, 2026
@renovate
renovate Bot force-pushed the renovate/github-actions-dependencies branch 5 times, most recently from 52c27e6 to f219679 Compare September 16, 2026 21:43
@renovate
renovate Bot force-pushed the renovate/github-actions-dependencies branch from f219679 to bc83399 Compare September 17, 2026 05:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: tooling Reusable workflows, Gradle, templates, Renovate, and API tooling. component: dependencies Dependency update or dependency policy. dependencies Dependency update, lockfile change, or dependency policy. priority: P2 Medium; normal planned work. type: chore Maintenance work without intended behavior change.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants