This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [pnpm/action-setup](https://github.com/pnpm/action-setup) | action | minor | `v4` → `v4.4.0` |
---
### Release Notes
<details>
<summary>pnpm/action-setup (pnpm/action-setup)</summary>
### [`v4.4.0`](https://github.com/pnpm/action-setup/releases/tag/v4.4.0)
[Compare Source](https://github.com/pnpm/action-setup/compare/v4.3.0...v4.4.0)
Updated the action to use Node.js 24.
### [`v4.3.0`](https://github.com/pnpm/action-setup/releases/tag/v4.3.0)
[Compare Source](https://github.com/pnpm/action-setup/compare/v4.2.0...v4.3.0)
#### What's Changed
- docs: fix the run\_install example in the Readme by [@​dreyks](https://github.com/dreyks) in [#​175](https://github.com/pnpm/action-setup/pull/175)
- chore: remove unused `@types/node-fetch` dependency by [@​silverwind](https://github.com/silverwind) in [#​186](https://github.com/pnpm/action-setup/pull/186)
- Clarify that package\_json\_file is relative to GITHUB\_WORKSPACE by [@​chris-martin](https://github.com/chris-martin) in [#​184](https://github.com/pnpm/action-setup/pull/184)
- feat: store caching by [@​jrmajor](https://github.com/jrmajor) in [#​188](https://github.com/pnpm/action-setup/pull/188)
- refactor: remove star imports by [@​KSXGitHub](https://github.com/KSXGitHub) in [#​196](https://github.com/pnpm/action-setup/pull/196)
- fix(ci): exclude macos by [@​KSXGitHub](https://github.com/KSXGitHub) in [#​197](https://github.com/pnpm/action-setup/pull/197)
#### New Contributors
- [@​dreyks](https://github.com/dreyks) made their first contribution in [#​175](https://github.com/pnpm/action-setup/pull/175)
- [@​silverwind](https://github.com/silverwind) made their first contribution in [#​186](https://github.com/pnpm/action-setup/pull/186)
- [@​chris-martin](https://github.com/chris-martin) made their first contribution in [#​184](https://github.com/pnpm/action-setup/pull/184)
- [@​jrmajor](https://github.com/jrmajor) made their first contribution in [#​188](https://github.com/pnpm/action-setup/pull/188)
- [@​Boosted-Bonobo](https://github.com/Boosted-Bonobo) made their first contribution in [#​199](https://github.com/pnpm/action-setup/pull/199)
**Full Changelog**: <https://github.com/pnpm/action-setup/compare/v4.2.0...v4.3.0>
### [`v4.2.0`](https://github.com/pnpm/action-setup/releases/tag/v4.2.0)
[Compare Source](https://github.com/pnpm/action-setup/compare/v4.1.0...v4.2.0)
When there's a `.npmrc` file at the root of the repository, pnpm will be fetched from the registry that is specified in that `.npmrc` file [#​179](https://github.com/pnpm/action-setup/pull/179)
### [`v4.1.0`](https://github.com/pnpm/action-setup/releases/tag/v4.1.0)
[Compare Source](https://github.com/pnpm/action-setup/compare/v4...v4.1.0)
Add support for `package.yaml` [#​156](https://github.com/pnpm/action-setup/pull/156).
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- "on monday,on friday"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMy4zIiwidXBkYXRlZEluVmVyIjoiNDQuMTMuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21hdGlvbiIsImdpdGh1Yi1hY3Rpb25zIl19-->
CODEOWNERS rules
requested review from AutoReview 2026-08-11 00:23:41 +02:00
Renovate
scheduled this pull request to auto merge when all checks succeed 2026-08-11 00:23:41 +02:00
AutoReview
approved these changes 2026-08-11 00:23:47 +02:00
Testing: The change has been validated by pinning the action to a specific commit hash, consistent with other actions in the workflow.
Improvement: None.
Nitpick: None.
This PR correctly updates pnpm/action-setup to v4.4.0 while pinning it to a specific SHA, which is a security best practice for GitHub/Gitea Actions.
**Summary**
* **Critical:** None.
* **Testing:** The change has been validated by pinning the action to a specific commit hash, consistent with other actions in the workflow.
* **Improvement:** None.
* **Nitpick:** None.
This PR correctly updates `pnpm/action-setup` to v4.4.0 while pinning it to a specific SHA, which is a security best practice for GitHub/Gitea Actions.
Testing: The update to pnpm/action-setup@v4.4.0 maintains the security best practice of pinning the action to a specific commit SHA (fc06bc1257f339d1d5d8b3a19a8cae5388b55320).
Improvement: None.
Nitpick: None.
The update is straightforward and follows existing project patterns.
**Summary**
* **Critical:** None.
* **Testing:** The update to `pnpm/action-setup@v4.4.0` maintains the security best practice of pinning the action to a specific commit SHA (`fc06bc1257f339d1d5d8b3a19a8cae5388b55320`).
* **Improvement:** None.
* **Nitpick:** None.
The update is straightforward and follows existing project patterns.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v4→v4.4.0Release Notes
pnpm/action-setup (pnpm/action-setup)
v4.4.0Compare Source
Updated the action to use Node.js 24.
v4.3.0Compare Source
What's Changed
@types/node-fetchdependency by @silverwind in #186New Contributors
Full Changelog: https://github.com/pnpm/action-setup/compare/v4.2.0...v4.3.0
v4.2.0Compare Source
When there's a
.npmrcfile at the root of the repository, pnpm will be fetched from the registry that is specified in that.npmrcfile #179v4.1.0Compare Source
Add support for
package.yaml#156.Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.
Summary
This PR correctly updates
pnpm/action-setupto v4.4.0 while pinning it to a specific SHA, which is a security best practice for GitHub/Gitea Actions.98b21fea91to0ae83b44f5Summary
pnpm/action-setup@v4.4.0maintains the security best practice of pinning the action to a specific commit SHA (fc06bc1257f339d1d5d8b3a19a8cae5388b55320).The update is straightforward and follows existing project patterns.