From 8fc5a961111daeab680d20cc2cb66b068383bbeb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 1 Jul 2026 16:05:55 +0000 Subject: [PATCH 1/3] chore(deps): bump pnpm/action-setup from 4 to 6 Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4 to 6. - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/v4...v6) --- updated-dependencies: - dependency-name: pnpm/action-setup dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/lint.yaml | 2 +- .github/workflows/test.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 09a6ecd6..38ec4c93 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -21,7 +21,7 @@ jobs: node-version: '22.13.0' - name: Setup pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@v6 with: version: 10 diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 597c6a9a..3c356786 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -20,7 +20,7 @@ jobs: check-latest: true - name: Setup pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@v6 with: version: 10 From 5bd1b63eb09047755a5f4eeccb10c0e19740cc31 Mon Sep 17 00:00:00 2001 From: russellwheatley Date: Mon, 6 Jul 2026 13:07:08 +0100 Subject: [PATCH 2/3] chore: use SHAs instead of number --- .github/workflows/lint.yaml | 6 +++--- .github/workflows/test.yaml | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 38ec4c93..145a6cb8 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -13,15 +13,15 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: '22.13.0' - name: Setup pnpm - uses: pnpm/action-setup@v6 + uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 with: version: 10 diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 3c356786..6525e15c 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -11,16 +11,16 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Setup node - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 22.13.0 check-latest: true - name: Setup pnpm - uses: pnpm/action-setup@v6 + uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 with: version: 10 From 36c3214ca775dbbee04fdaf97a8f4addd29fee73 Mon Sep 17 00:00:00 2001 From: russellwheatley Date: Mon, 6 Jul 2026 13:16:36 +0100 Subject: [PATCH 3/3] chore: give read permission to lint and test yaml files --- .github/workflows/lint.yaml | 3 +++ .github/workflows/test.yaml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 145a6cb8..9885143f 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -6,6 +6,9 @@ on: - main pull_request: +permissions: + contents: read + jobs: lint: name: Lint and Format Check diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 6525e15c..49274c88 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -6,6 +6,9 @@ on: - main pull_request: +permissions: + contents: read + jobs: test: runs-on: ubuntu-latest