chore(deps): update github pipeline dependencies (major) by Infra-Workleap · Pull Request #46 · workleap/wl-openapi-typescript

Workleap IT (Infra-Workleap) · 2025-08-09T03:08:10Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	major	`v4` → `v6`
actions/checkout	action	major	`v4` → `v7`
actions/setup-dotnet	action	major	`v4` → `v6`
actions/setup-node	action	major	`v4` → `v7`
changesets/action	action	major	`v1` → `v2.1.1`
pnpm/action-setup	action	major	`v4` → `v6`

Release Notes

actions/cache (actions/cache)

`v6.1.0`

Compare Source

What's Changed

Bump @actions/cache to v6.1.0 - handle read-only cache access by @jasongin in #1768

Full Changelog: actions/cache@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Update packages, migrate to ESM by @Samirat in #1760

Full Changelog: actions/cache@v5...v6.0.0

`v5.1.0`

Compare Source

What's Changed

Bump @actions/cache to v5.1.0 - handle read-only cache access by @jasongin in #1775

Full Changelog: actions/cache@v5...v5.1.0

`v5.0.5`

Compare Source

What's Changed

Update ts-http-runtime dependency by @yacaovsnc in #1747

Full Changelog: actions/cache@v5...v5.0.5

`v5.0.4`

Compare Source

What's Changed

Add release instructions and update maintainer docs by @Link- in #1696
Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @Link- in #1697
Fix workflow permissions and cleanup workflow names / formatting by @Link- in #1699
docs: Update examples to use the latest version by @XZTDean in #1690
Fix proxy integration tests by @Link- in #1701
Fix cache key in examples.md for bun.lock by @RyPeck in #1722
Update dependencies & patch security vulnerabilities by @Link- in #1738

New Contributors

@XZTDean made their first contribution in #1690
@RyPeck made their first contribution in #1722

Full Changelog: actions/cache@v5...v5.0.4

`v5.0.3`

Compare Source

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

`v5.0.2`: v.5.0.2

Compare Source

v5.0.2

What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

`v5.0.1`

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

v5.0.1

What's Changed

fix: update @actions/cache for Node.js 24 punycode deprecation by @salmanmkc in #1685
prepare release v5.0.1 by @salmanmkc in #1686

v5.0.0

What's Changed

Upgrade to use node24 by @salmanmkc in #1630
Prepare v5.0.0 release by @salmanmkc in #1684

Full Changelog: actions/cache@v5...v5.0.1

`v5.0.0`

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

What's Changed

Upgrade to use node24 by @salmanmkc in #1630
Prepare v5.0.0 release by @salmanmkc in #1684

Full Changelog: actions/cache@v4.3.0...v5.0.0

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Skip running unsafe pr check if input is default by @aiqiaoy in #2518
Trim only ascii whitespace for branch by @aiqiaoy in #2521
Escape values passed to --unset by @aiqiaoy in #2530
Various dependency updates

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Various dependency updates

`v6.1.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in #2500
backport fixes to releases-v6 by @aiqiaoy in #2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

`v5.1.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v5 by @aiqiaoy in #2501
backport fixes to releases-v5 by @aiqiaoy in #2523

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v5.0.1...v5.1.0

`v5.0.1`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v5.0.0`

Compare Source

Update actions checkout to use node 24 by @salmanmkc in #2226

actions/setup-dotnet (actions/setup-dotnet)

`v6.0.0`

Compare Source

What's Changed

Migrate to ESM and upgrade dependencies by @priyagupta108 in #752
Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #751
chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in #756

New Contributors

@philip-gai made their first contribution in #756

Full Changelog: actions/setup-dotnet@v5...v6.0.0

`v5.4.0`

Compare Source

What's Changed

Enhancements

Pin actions to commit SHAs in workflows by @priya-kinthali in #744
Expand the CSC problem matcher to light up more errors on GitHub. by @StephenCleary in #717
Improve global.json SDK version validation for rollForward by @priyagupta108 in #742

The action now validates the sdk.version field in global.json when rollForward is specified. The version must be a fully-qualified SDK version (e.g., 8.0.100, 10.0.100). Wildcard versions (e.g., 10.0.*) and runtime-style versions (e.g., 8.0.0) will now fail. See the .NET SDK version specification for details.

Documentation

Docs(action): Explicitly mark all optional inputs with required: false by @kranthipoturaju in #737

Bug Fixes

Fix global.json creation command by @michal2612 in #694

Dependency Updates

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #746

New Contributors

@jasongin made their first contribution in #746
@michal2612 made their first contribution in #694
@kranthipoturaju made their first contribution in #737
@StephenCleary made their first contribution in #717

Full Changelog: actions/setup-dotnet@v5.3.0...v5.4.0

`v5.3.0`

Compare Source

What's Changed

Enhancements

Add dotnet-version: latest support with dotnet-channel input by @mahabaleshwars in #730
Support global.json's rollForward latest* variants by @js6pak in #538
Improve version resolution by @akoeplinger in #560

Dependency Updates

Upgrade @actions/* and fast-xml-parser dependencies by @Copilot in #728
Update install scripts to v2026.05.19 (preserve archive links) by @MichaelSimons in #736
Add rollForward note in README, improve proxy health check in e2e tests and bump version to v5.3.0 by @priyagupta108 in #738

Bug Fixes

Update Test Proxy job by @priya-kinthali in #703

New Contributors

@Copilot made their first contribution in #728
@akoeplinger made their first contribution in #560
@MichaelSimons made their first contribution in #736
@js6pak made their first contribution in #538

Full Changelog: actions/setup-dotnet@v5...v5.3.0

`v5.2.0`

Compare Source

What's changed

Enhancements

Add support for workloads input by @gowridurgad in #693
Add support for optional architecture input for cross-architecture .NET installs by @priya-kinthali in #700

Dependency Updates

Upgrade fast-xml-parser from 4.4.1 to 5.3.6 by @dependabot in #671
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #705

Full Changelog: actions/setup-dotnet@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

Documentation

Readme update for environment variable on self hosted linux runners by @priya-kinthali in #689
Contributor icon updates by @Falco20019 in #604

Dependency updates

Upgrade actions/checkout from 5 to 6 by @dependabot in #684
Upgrade to latest actions packages by @salmanmkc in #687
Upgrade dependencies in testproject and checkout in Readme by @priya-kinthali in #692

New Contributors

@priya-kinthali made their first contribution in #689
@Falco20019 made their first contribution in #604

Full Changelog: actions/setup-dotnet@v5...v5.1.0

`v5.0.1`

Compare Source

What's Changed

Upgrade typescript from 5.4.2 to 5.9.2 and document breaking changes in v5 by @dependabot in #624
Upgrade eslint-plugin-jest from 27.9.0 to 29.0.1 by @dependabot in #648
Upgrade actions/publish-action from 0.3.0 to 0.4.0 and update macos-13 to macos-15-intel by @dependabot in #665

Full Changelog: actions/setup-dotnet@v5...v5.0.1

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to Node.js 24 and modernize async usage by @salmanmkc in #654

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Updates

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in #622
Upgrade husky from 8.0.3 to 9.1.7 by @dependabot[bot] in #591
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot[bot] in #594
Upgrade eslint-config-prettier from 9.1.0 to 10.1.5 by @dependabot[bot] in #639
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #641
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #652
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #662

Bug Fixes

Remove Support for older .NET Versions and Update installers scripts by @gowridurgad in #647

New Contributors

@gowridurgad made their first contribution in #647
@salmanmkc made their first contribution in #654

Full Changelog: actions/setup-dotnet@v4...v5.0.0

actions/setup-node (actions/setup-node)

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
Migrate to ESM and upgrade dependencies by @gowridurgad in #1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
Only use mirrorToken in getManifest if it's provided by @deiga in #1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
docs: Update restore-only cache documentation by @priya-kinthali in #1550
docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569

New Contributors

@chiranjib-swain made their first contribution in #1536
@deiga made their first contribution in #1548
@jasongin made their first contribution in #1569

Full Changelog: actions/setup-node@v6...v7.0.0

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

`v6.4.0`

Compare Source

What's Changed

Dependency updates:

Upgrade @actions dependencies by @Copilot in #1525
Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in #1533

New Contributors

@Copilot made their first contribution in #1525

Full Changelog: actions/setup-node@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Documentation

Documentation update related to absence of Lockfile by @mahabaleshwars in #1454
Correct mirror option typos by @MikeMcC399 in #1442
Readme update on checkout version v6 by @deining in #1446
Readme typo fixes @munyari in #1226
Advanced document update on checkout version v6 by @aparnajyothi-y in #1468

Dependency updates:

Upgrade @actions/cache to v5.0.1 by @salmanmkc in #1449

New Contributors

@mahabaleshwars made their first contribution in #1454
@MikeMcC399 made their first contribution in #1442
@deining made their first contribution in #1446
@munyari made their first contribution in #1226

Full Changelog: actions/setup-node@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

changesets/action (changesets/action)

`v2.1.1`

Compare Source

Patch Changes

#721 da1ea29 Thanks @KEBABSELLER6! - Fixed typo in renamed inputs from v1 to v2

`v2.1.0`

Compare Source

Minor Changes

#718 3b7c71c Thanks @bluwy! - Add a cwd input to the root action, /select-mode, /version, /pack, and /publish sub-actions to set the current working directory to execute Changesets in. This input existed in v1 but was incorrectly removed.

Patch Changes

#716 6f58ba3 Thanks @bluwy! - Update pr-status message to link to the new faq page

`v2.0.0`

Compare Source

Major Changes

#692 cb3f011 Thanks @Andarist! - Release commits and tags are now pushed using the GitHub API by default.

Replace the commit-mode input with the boolean push-with-git-cli input. Set push-with-git-cli: true to continue using the Git CLI.

Regardless of the push mode, custom GitHub tokens must be passed explicitly through the github-token input. The GITHUB_TOKEN environment variable and credentials configured by actions/checkout or embedded in remote URLs are not substitutes for this input. When the Git CLI is enabled, github-token takes precedence over those repository credentials.
#680 ca57073 Thanks @bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.
#657 4f718b5 Thanks @Andarist! - Removed compatibility support for old Changesets v1.
#681 7359107 Thanks @bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

Inputs:
- version -> version-script
- publish -> publish-script
- commit -> commit-message
- title -> pr-title
- branch -> pr-base-branch
Outputs:
- pull-request-number -> pr-number
#674 164652b Thanks @bluwy! - Remove support for passing custom GitHub token through the GITHUB_TOKEN environment variable. It should be passed to the github-token input instead.
#659 5649ff4 Thanks @bluwy! - Remove cwd option for changesets/action. Use the step working-directory option instead to change the directory.
#673 823cf74 Thanks @bluwy! - Update to Changesets v3 packages
#695 469993c Thanks @bluwy! - Removed .npmrc handling when the NPM_TOKEN environment variable is set.

Authentication should be handled via Trusted Publishing instead. If a token is still needed, use actions/setup-node to set it up instead via the registry-url option. Check out the updated action README for more information of setting up npm authentication in GitHub Actions.
#668 0eae789 Thanks @bluwy! - Rename the input and output names to kebab-case instead of camelCase to match the official GitHub actions pattern

Minor Changes

#656 a12d90d Thanks @bluwy! - Add new /select-mode, /version, and /publish sub-actions to better control version and publish steps
#678 f71ae04 Thanks @Andarist! - Published packages detection done through stdout parsing was replaced with one based on the shared output file using CHANGESETS_OUTPUT environment variable. When using custom scripts this environment variable should always be passed down to the Changesets CLI invocations.

Patch Changes

#699 5b307d3 Thanks @Andarist! - Validate that projects use Changesets CLI v3 and direct Changesets CLI v2 users to changesets/action@v1.
#697 84d78c6 Thanks @Andarist! - Allow custom publish scripts to complete without a Changesets output file, warning that GitHub releases and git tags cannot be created when that file is missing.
#670 5a8b9b7 Thanks @Andarist! - Authenticate git CLI pushes with the configured GitHub token using Git extra headers instead of writing to a global .netrc file.
#670 5a8b9b7 Thanks @Andarist! - Derive the Git server URL from the GitHub Actions context when configuring git CLI authentication to support GitHub Enterprise Server setups.
#688 219ea82 Thanks @Andarist! - Remove the setup-git-user input. Complete custom Git identities are now preserved automatically, while github-actions[bot] is configured as a fallback before creating local release commits or tags.

pnpm/action-setup (pnpm/action-setup)

`v6.0.10`

Compare Source

What's Changed

docs(README): point users to the successor pnpm/setup action by @BlackHole1 in #282
refactor: introduce restore keys for cache by @SukkaW in #280
ci: use pnpm 11 for pr-check by @jamietanna in #284
fix: update pnpm to v11.19.0 by @jamietanna in #283
docs: update README to include devEngines.packageManager by @nemchik in #273

New Contributors

@jamietanna made their first contribution in #284
@nemchik made their first contribution in #273

Full Changelog: pnpm/action-setup@v6...v6.0.10

`v6.0.9`

Compare Source

What's Changed

fix: update pnpm to v11.7.0 by @zkochan in #267

Full Changelog: pnpm/action-setup@v6...v6.0.9

`v6.0.8`

Compare Source

What's Changed

docs(README): fix cache_dependency_path type by @haines in #257
fix: drop patchPnpmEnv so standalone+self-update works on Windows by @zkochan in #258
fix: update pnpm to 11.1.1 by @mungodewar in #248

New Contributors

@mungodewar made their first contribution in #248

Full Changelog: pnpm/action-setup@v6.0.7...v6.0.8

`v6.0.7`

Compare Source

What's Changed

fix: honor devEngines.packageManager.onFail=error (#252) by @zkochan in #254
fix: restore inputs from state in post by @haines in #255
fix: self-update bootstrap to packageManager-pinned version (#233) by @zkochan in #256

New Contributors

@haines made their first contribution in #255

Full Changelog: pnpm/action-setup@v6.0.6...v6.0.7

`v6.0.6`

Compare Source

What's Changed

fix: bin_dest output points to self-updated pnpm, not bootstrap by @zkochan in #249

Full Changelog: pnpm/action-setup@v6.0.5...v6.0.6

`v6.0.5`

Compare Source

What's Changed

fix: append (not prepend) action node dir to PATH for npm bootstrap by @zkochan in #241

Full Changelog: pnpm/action-setup@v6.0.4...v6.0.5

`v6.0.4`

Compare Source

What's Changed

fix: use npm co-located with the action node binary by @benquarmby in #239

New Contributors

@benquarmby made their first contribution in #239

Full Changelog: pnpm/action-setup@v6.0.3...v6.0.4

`v6.0.3`

Compare Source

Updated pnpm to v11.0.0-rc.5

Full Changelog: pnpm/action-setup@v6.0.2...v6.0.3

`v6.0.2`

Compare Source

What's Changed

fix: pnpm self-update binary shadowed by bootstrap on PATH by @oniani1 in #230

New Contributors

@oniani1 made their first contribution in #230

Full Changelog: pnpm/action-setup@v6.0.1...v6.0.2

`v6.0.1`

Compare Source

Update pnpm to v11.0.0-rc.2. pnpm-lock.yaml will not be saved with two documents unless the packageManager is set via devEngines.packageManager. Related issue: #228

`v6.0.0`

Compare Source

Added support for pnpm v11.

`v5.0.0`

Compare Source

Updated the action to use Node.js 24.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

Workleap IT (Infra-Workleap) · 2025-09-06T03:00:13Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: .github/workflows/publish.yml

Post-upgrade command 'terraform-docs markdown table --output-file README.md --hide resources,data-sources ./.github/workflows' has not been added to the allowed list in allowedCommands

File name: .github/workflows/publish-docs.yml

Post-upgrade command 'terraform-docs markdown table --output-file README.md --hide resources,data-sources ./.github/workflows' has not been added to the allowed list in allowedCommands

File name: .github/workflows/ci.yml

Post-upgrade command 'terraform-docs markdown table --output-file README.md --hide resources,data-sources ./.github/workflows' has not been added to the allowed list in allowedCommands

File name: .github/workflows/publish-docs.yml

Post-upgrade command 'terraform-docs markdown table --output-file README.md --hide resources,data-sources ./.github/workflows' has not been added to the allowed list in allowedCommands

File name: .github/actions/setup/action.yml

Post-upgrade command 'terraform-docs markdown table --output-file README.md --hide resources,data-sources ./.github/actions/setup' has not been added to the allowed list in allowedCommands

File name: .github/actions/setup/action.yml

Post-upgrade command 'terraform-docs markdown table --output-file README.md --hide resources,data-sources ./.github/actions/setup' has not been added to the allowed list in allowedCommands

Copilot

Pull request overview

Updates GitHub Actions dependencies used by this repo’s CI and release automation workflows to newer major versions, keeping the pipeline infrastructure current.

Changes:

Bump actions/checkout to v6 across CI and publish workflows.
Bump actions/setup-dotnet to v5 for docs publishing.
Bump shared composite setup action dependencies (pnpm/action-setup, actions/setup-node, actions/cache) to their newer major versions.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File	Description
`.github/workflows/publish.yml`	Updates checkout action to `actions/checkout@v6` for the publish workflow.
`.github/workflows/publish-docs.yml`	Updates checkout to `v6` and setup-dotnet to `v5` for docs publishing.
`.github/workflows/ci.yml`	Updates checkout action to `actions/checkout@v6` for CI runs.
`.github/actions/setup/action.yml`	Updates pnpm/node/cache action dependencies used by the shared setup composite action.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  steps:
  - name: Install pnpm
-    uses: pnpm/action-setup@v4
+    uses: pnpm/action-setup@v6


      - name: Create Release Pull Request or Publish to npm
        id: changesets
-        uses: changesets/action@v1
+        uses: changesets/action@v2.1.1


Workleap IT (Infra-Workleap) added the renovate label Aug 9, 2025

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from c69e5a1 to 9f81805 Compare August 15, 2025 03:12

Workleap IT (Infra-Workleap) changed the title ~~chore(deps): update dependency pnpm to v10~~ chore(deps): update github pipeline dependencies (major) Aug 15, 2025

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 9f81805 to f4ba6f4 Compare September 6, 2025 03:00

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from f4ba6f4 to edd38c5 Compare September 7, 2025 03:02

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch 2 times, most recently from 3e72f4b to 55879c5 Compare October 23, 2025 03:48

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 55879c5 to ebdc576 Compare November 24, 2025 04:06

Workleap IT (Infra-Workleap) changed the title ~~chore(deps): update github pipeline dependencies (major)~~ chore(deps): update github pipeline dependencies to v6 (major) Nov 25, 2025

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch 2 times, most recently from b080649 to 2c10c41 Compare November 28, 2025 03:48

Workleap IT (Infra-Workleap) changed the title ~~chore(deps): update github pipeline dependencies to v6 (major)~~ chore(deps): update github pipeline dependencies (major) Nov 28, 2025

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch 2 times, most recently from 5108874 to da5139c Compare December 4, 2025 04:08

Workleap IT (Infra-Workleap) changed the title ~~chore(deps): update github pipeline dependencies (major)~~ chore(deps): update github pipeline dependencies to v5 (major) Dec 4, 2025

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from da5139c to cd4c34b Compare December 5, 2025 03:55

Workleap IT (Infra-Workleap) changed the title ~~chore(deps): update github pipeline dependencies to v5 (major)~~ chore(deps): update github pipeline dependencies (major) Dec 5, 2025

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from cd4c34b to 40480d5 Compare December 6, 2025 03:47

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 40480d5 to c665a44 Compare December 16, 2025 04:17

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch 4 times, most recently from e1f3ea2 to 317a890 Compare January 20, 2026 05:27

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch 2 times, most recently from 414a160 to 727bcfc Compare March 6, 2026 05:34

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch 2 times, most recently from 2e583fa to 8a9d7cb Compare March 22, 2026 06:25

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 8a9d7cb to 4a8ee35 Compare May 21, 2026 00:47

Copilot AI review requested due to automatic review settings May 21, 2026 00:47

Copilot started reviewing on behalf of Workleap IT (Infra-Workleap) May 21, 2026 00:47 View session

Copilot AI reviewed May 21, 2026

View reviewed changes

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 4a8ee35 to 4625e8e Compare June 6, 2026 07:03

github-advanced-security Bot found potential problems Jun 6, 2026

View reviewed changes

Comment thread .github/actions/setup/action.yml Fixed

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 4625e8e to 9134032 Compare June 13, 2026 07:18

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 9134032 to 41f771a Compare June 20, 2026 07:27

github-advanced-security Bot found potential problems Jun 20, 2026

View reviewed changes

Comment thread .github/actions/setup/action.yml Fixed

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch 2 times, most recently from 0b1feaa to 84298a2 Compare July 4, 2026 07:01

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 84298a2 to 70150b2 Compare July 18, 2026 06:43

github-advanced-security Bot found potential problems Jul 18, 2026

View reviewed changes

Comment thread .github/actions/setup/action.yml Fixed

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 70150b2 to b6b16aa Compare July 25, 2026 06:47

github-advanced-security Bot found potential problems Jul 25, 2026

View reviewed changes

Comment thread .github/actions/setup/action.yml

steps:

- name: Install pnpm

uses: pnpm/action-setup@v4

uses: pnpm/action-setup@v6

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from b6b16aa to f60376f Compare August 8, 2026 06:16

github-advanced-security Bot found potential problems Aug 8, 2026

View reviewed changes

Comment thread .github/actions/setup/action.yml Fixed

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from f60376f to cf4c987 Compare August 15, 2026 06:08

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from cf4c987 to c529878 Compare August 29, 2026 06:21

github-advanced-security Bot found potential problems Aug 29, 2026

View reviewed changes

Comment thread .github/workflows/publish.yml

- name: Create Release Pull Request or Publish to npm

id: changesets

uses: changesets/action@v1

uses: changesets/action@v2.1.1

chore(deps): update github pipeline dependencies

a433cf4

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from c529878 to a433cf4 Compare September 5, 2026 06:09

Navigation Menu

Uh oh!

chore(deps): update github pipeline dependencies (major) - #46

chore(deps): update github pipeline dependencies (major)#46
Workleap IT (Infra-Workleap) wants to merge 1 commit into
mainfrom
renovate/major-github-pipeline-dependencies

Workleap IT (Infra-Workleap) commented Aug 9, 2025 •

edited

Loading

Uh oh!

Workleap IT (Infra-Workleap) commented Sep 6, 2025 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

Workleap IT (Infra-Workleap) commented Aug 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

v5.0.2: v.5.0.2

v5.0.2

What's Changed

v5.0.1

What's Changed

v5.0.0

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

Enhancements

Documentation

Bug Fixes

Dependency Updates

New Contributors

What's Changed

Enhancements

Dependency Updates

Bug Fixes

New Contributors

What's changed

Enhancements

Dependency Updates

What's Changed

Documentation

Dependency updates

New Contributors

What's Changed

What's Changed

Breaking Changes

Dependency Updates

Bug Fixes

New Contributors

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

What's Changed

What's Changed

Dependency updates:

New Contributors

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

What's Changed

Documentation

Dependency updates:

New Contributors

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

Patch Changes

Minor Changes

Patch Changes

Major Changes

Workleap IT (Infra-Workleap) commented Aug 9, 2025 •

edited

Loading

`v5.0.2`: v.5.0.2

Workleap IT (Infra-Workleap) commented Sep 6, 2025 •

edited

Loading