Update cloudposse-github-actions/get-pr action to v3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
cloudposse-github-actions/get-pr	action	major	v2 → v3

---

Release Notes

cloudposse-github-actions/get-pr (cloudposse-github-actions/get-pr)

v3.1.0

Compare Source

fix: update js-yaml transitive dep from 3.14.1 to 3.15.0 to unblock Dependabot security job @​[copilot-swe-agent[bot]](https://redirect.github.com/apps/copilot-swe-agent) (#​31)

Dependabot's security update job was failing with `security_update_not_possible` for `js-yaml` — it correctly identified the vulnerable `3.14.1` as installed but couldn't resolve a fix due to apparent conflicts with the `^4.1.0` requirement from `eslint`.

Root cause

js-yaml@3.14.1 was pulled in transitively via:

babel-plugin-istanbul → @​istanbuljs/load-nyc-config@1.1.0 → js-yaml@^3.13.1 → 3.14.1

This is independent of the direct js-yaml@^4.3.0 devDependency, but Dependabot's resolver treated the ^4.x requirement from eslint as a blocker for the ^3.x range update.

Change

• yarn.lock: Pinned js-yaml@^3.13.1 resolution to 3.15.0 (lowest non-vulnerable 3.x release per Dependabot's own advisory data). Added the esprima "^4.0.0" dependency that 3.15.0 introduces (already present in the lockfile from other packages).

v3.0.0

Compare Source

Upgrade action runtime from Node 20 to Node 24 @​[copilot-swe-agent[bot]](https://redirect.github.com/apps/copilot-swe-agent) (#​30)

Node 20 reaches end-of-life in April 2026; this upgrades the action and local toolchain to Node 24.

Changes

• action.yml: using: node20 → using: node24
• .node-version / .nvmrc: pinned to 24.18.0 / v24
• package.json: engines.node raised to >=24; @types/node bumped to ^24.0.0
• yarn.lock: updated for new @types/node
• dist/: rebuilt with ncc

v3

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[mergify]

Important

Cloud Posse Engineering Team Review Required

This pull request modifies files that require Cloud Posse's review. Please be patient, and a core maintainer will review your changes.

To expedite this process, reach out to us on Slack in the #pr-reviews channel.