Skip to content

ci: bump pnpm/action-setup from 5.0.0 to 6.0.8 - #375

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/pnpm/action-setup-6.0.8
Open

ci: bump pnpm/action-setup from 5.0.0 to 6.0.8#375
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/pnpm/action-setup-6.0.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Copy link
Copy Markdown
Contributor

Bumps pnpm/action-setup from 5.0.0 to 6.0.8.

Release notes

Sourced from pnpm/action-setup's releases.

v6.0.8

What's Changed

New Contributors

Full Changelog: pnpm/action-setup@v6.0.7...v6.0.8

v6.0.7

What's Changed

New Contributors

Full Changelog: pnpm/action-setup@v6.0.6...v6.0.7

v6.0.6

What's Changed

Full Changelog: pnpm/action-setup@v6.0.5...v6.0.6

v6.0.5

What's Changed

Full Changelog: pnpm/action-setup@v6.0.4...v6.0.5

v6.0.4

What's Changed

New Contributors

Full Changelog: pnpm/action-setup@v6.0.3...v6.0.4

v6.0.3

Updated pnpm to v11.0.0-rc.5

Full Changelog: pnpm/action-setup@v6.0.2...v6.0.3

... (truncated)

Commits
  • 0e279bb fix: update pnpm to 11.1.1 (#248)
  • 3e83581 fix: drop patchPnpmEnv so standalone+self-update works on Windows (#258)
  • 551b42e docs(README): fix cache_dependency_path type (#257)
  • 739bfe4 fix: self-update bootstrap to packageManager-pinned version (#233) (#256)
  • f61705d chore: add CODEOWNERS
  • 7a5507b fix: restore inputs from state in post (#255)
  • 1155470 fix: honor devEngines.packageManager.onFail=error (#252) (#254)
  • 91ab88e fix: bin_dest output points to self-updated pnpm, not bootstrap (#249)
  • e578e19 fix: update pnpm to 11.0.4
  • 8912a91 fix: append (not prepend) action node dir to PATH for npm bootstrap (#241)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Update CI workflows to use pnpm/action-setup v6.0.8 for improved stability and Windows support. This only updates GitHub Actions; jobs still install pnpm 10.15.0.

Written for commit d2d8386. Summary will update on new commits. Review in cubic

Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 5.0.0 to 6.0.8.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@fc06bc1...0e279bb)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.8
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 19, 2026
@sonarqubecloud

Copy link
Copy Markdown

@github-actions

Copy link
Copy Markdown
Contributor

Deploy preview for team-scope-test ready!

Project:team-scope-test
Status: ✅  Deploy successful!
Preview URL:https://team-scope-test-omgqygclg-dietfriends.vercel.app
Latest Commit:d2d8386

Deployed with vercel-action

@github-actions

github-actions Bot commented May 19, 2026

Copy link
Copy Markdown
Contributor

Deploy preview for zeit-now-deployment-action-example-angular ready!

Project:zeit-now-deployment-action-example-angular
Status: ✅  Deploy successful!
Preview URL:https://zeit-now-deployment-action-example-angular-g9y6i3rqe.vercel.app
Latest Commit:d2d8386
Alias:https://staging.angular.vercel-action.amond.dev
Alias:https://pr-375.angular.vercel-action.amond.dev

Deployed with vercel-action

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 4 files

Architecture diagram
sequenceDiagram
    participant GHA as GitHub Actions Runner
    participant Setup as pnpm/action-setup@v6.0.8
    participant PNPM as pnpm CLI (10.15.0)
    participant Cache as Action Cache
    participant Build as Build Steps

    Note over GHA,Build: NEW: Updated pnpm/action-setup v5.0.0 → v6.0.8

    GHA->>GHA: Trigger CI / check-dist / example workflows
    GHA->>Setup: uses: pnpm/action-setup@v6.0.8
    Note over Setup: CHANGED: Action version (commit hash updated)
    Setup->>Setup: CHANGED: read config (version: 10.15.0)
    Setup->>Setup: NEW: self-update bootstrap to packageManager-pinned version
    Setup->>PNPM: Install / bootstrap pnpm 10.15.0

    alt Cache hit
        Cache-->>PNPM: Restore cached store
    else Cache miss
        PNPM->>Cache: Store pnpm store in cache
    end

    Setup->>Setup: NEW: drop patchPnpmEnv (fixes Windows standalone+self-update)
    Setup->>Setup: CHANGED: bin_dest points to self-updated pnpm, not bootstrap
    Setup->>Setup: CHANGED: restore inputs from state in post step
    Setup-->>GHA: pnpm ready (added to PATH)
    GHA->>Build: Run install, lint, test, build

    alt DevEngines check (NEW)
        Setup->>Setup: honordevEngines.packageManager.onFail=error
        alt onFail=error
            Setup-->>GHA: Fail if mismatched pnpm version
        end
    end

    opt Post-job cleanup
        Setup->>Setup: CHANGED: restore inputs from state in post
    end

    Build-->>GHA: Results
    GHA-->>GHA: Report status (pass/fail)
Loading

Requires human review: This is a major version bump (v5 to v6) for a CI dependency, which could introduce breaking changes in workflow behavior even though the blast radius is limited to CI.

Re-trigger cubic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants