ci: bump pnpm/action-setup from 5.0.0 to 6.0.7 - #371
Closed
dependabot[bot] wants to merge 1 commit into
Closed
Conversation
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 5.0.0 to 6.0.7. - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](pnpm/action-setup@fc06bc1...739bfe4) --- updated-dependencies: - dependency-name: pnpm/action-setup dependency-version: 6.0.7 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Contributor
|
Deploy preview for team-scope-test ready!
Deployed with vercel-action |
Contributor
|
Deploy preview for zeit-now-deployment-action-example-angular ready!
Deployed with vercel-action |
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
There was a problem hiding this comment.
No issues found across 4 files
Architecture diagram
sequenceDiagram
participant GH as GitHub Actions Runner
participant Checkout as actions/checkout
participant PnpmSetup as pnpm/action-setup@v6.0.7
participant NodeSetup as actions/setup-node
participant BuildSteps as Build & Test Steps
Note over GH,BuildSteps: CI Workflow Execution (per job)
GH->>Checkout: Execute checkout step
Checkout-->>GH: Repository code on disk
GH->>PnpmSetup: Execute pnpm/action-setup@v6.0.7
Note right of PnpmSetup: CHANGED: v5.0.0 -> v6.0.7
alt v6.0.7: Self-update uses packageManager-pinned version
PnpmSetup->>PnpmSetup: Read devEngines.packageManager from package.json
PnpmSetup->>PnpmSetup: Download pnpm version pinned by packageManager field
Note right of PnpmSetup: Ensures bootstrap matches project's pinned pnpm
else v5.0.0: Self-update used fixed bootstrap version
PnpmSetup->>PnpmSetup: Download static bootstrap version
end
alt v6.0.7: honor devEngines.packageManager.onFail=error
PnpmSetup->>PnpmSetup: Check onFail setting
alt onFail=error
PnpmSetup->>PnpmSetup: Fail workflow if version mismatch
else no error setting
PnpmSetup->>PnpmSetup: Proceed with installed version
end
end
PnpmSetup-->>GH: pnpm installed & on PATH, outputs (bin_dest, etc.)
GH->>NodeSetup: Execute setup-node
NodeSetup-->>GH: Node.js installed
GH->>BuildSteps: Run cache, install, lint, test steps
BuildSteps->>PnpmSetup: Use pnpm binary from PATH
Note right of PnpmSetup: v6.0.7: bin_dest points to self-updated pnpm, not bootstrap
BuildSteps-->>GH: Build output
opt Post-job cleanup
PnpmSetup-->>PnpmSetup: Restore inputs from saved state
end
Auto-approved: This is a routine Dependabot update of a GitHub Actions step (pnpm/action-setup) from v5.0.0 to v6.0.7 across four workflow files, making only commit SHA and version comment changes with no impact on business logic, data, or production infrastructure.
Contributor
Author
|
Superseded by #375. |
dependabot
Bot
deleted the
dependabot/github_actions/pnpm/action-setup-6.0.7
branch
May 19, 2026 04:31
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps pnpm/action-setup from 5.0.0 to 6.0.7.
Release notes
Sourced from pnpm/action-setup's releases.
... (truncated)
Commits
739bfe4fix: self-update bootstrap to packageManager-pinned version (#233) (#256)f61705dchore: add CODEOWNERS7a5507bfix: restore inputs from state in post (#255)1155470fix: honor devEngines.packageManager.onFail=error (#252) (#254)91ab88efix: bin_dest output points to self-updated pnpm, not bootstrap (#249)e578e19fix: update pnpm to 11.0.48912a91fix: append (not prepend) action node dir to PATH for npm bootstrap (#241)26f6d4ffix: use npm co-located with the action node binary (#239)903f9c1fix: update pnpm to 11.0.0-rc.5bdf0af2test: add strict version-match jobs to reproduce #225 / #227Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by cubic
Update GitHub Actions workflows to use
pnpm/action-setupv6.0.7 instead of v5.0.0. This brings fixes for PATH/npm resolution, honorsdevEngines.packageManagererror settings, and ensures self-updates follow the packageManager-pinned version.Written for commit 617112c. Summary will update on new commits.