c5a2722b20
chore(deps): update jlumbroso/free-disk-space action to v1.3.2 (main) ( #46283 )
...
chore(deps): update jlumbroso/free-disk-space action to v1.3.2
| datasource | package | from | to |
| ----------- | ------------------------- | ------ | ------ |
| github-tags | jlumbroso/free-disk-space | v1.3.1 | v1.3.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-17 05:24:20 +00:00
f14c02a3eb
chore(deps): update docker/setup-qemu-action action to v4.4.0 (main) ( #46212 )
...
chore(deps): update docker/setup-qemu-action action to v4.4.0
| datasource | package | from | to |
| ----------- | ------------------------ | ------ | ------ |
| github-tags | docker/setup-qemu-action | v4.3.0 | v4.4.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-15 10:08:50 +00:00
b62fe59594
fix: remove references to "bot" ( #39305 )
...
We dropped the "bot" from our terminology long ago, but it looks like
we've got some outdated docs + code that reference it.
We should remove this to keep things consistent.
A `fix`, as we're changing the commit author's name, and log lines.
Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-09-02 08:56:20 +00:00
d481d33bcd
chore(deps): update docker/setup-qemu-action action to v4.3.0 (main) ( #45594 )
...
chore(deps): update docker/setup-qemu-action action to v4.3.0
| datasource | package | from | to |
| ----------- | ------------------------ | ------ | ------ |
| github-tags | docker/setup-qemu-action | v4.2.0 | v4.3.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-01 11:17:26 +00:00
2b56b52933
chore(deps): update pnpm/setup action to v2.1.0 (main) ( #45543 )
...
chore(deps): update pnpm/setup action to v2.1.0
| datasource | package | from | to |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v2.0.2 | v2.1.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-29 00:28:18 +00:00
34c7bcb7a5
ci: never restore caches into the release job
...
When running the Release job, we restore our `node_modules` cache via
`setup-node`. This leads to `semantic-release` executing - with
`contents: write`, `packages: write`, `id-token: write` and Docker Hub
credentials - the release process.
If we were to have a poisoned cache, this could lead to backdoored npm
packages and Docker images.
Although not currently exploitable, we should further harden this by:
- never using the cache for `release` jobs
- requiring a full `pnpm install --frozen-lockfile` on release jobs
- increasing the build time slightly on release jobs
This ensures that we don't leave ourselves vulnerable to cache poisoning
in the future.
It appears that zizmor's `cache-poisoning` audit covers this pattern,
but doesn't recognise a branch-push `semantic-release` job as a release
workflow, so won't flag regressions here.
Co-authored-by: Claude Fable 5 <jamie.tanna+claude-code@mend.io >
2026-08-18 11:04:13 +01:00
da7dc8b895
ci: add missing description to setup-docker action
...
To handle an ActionLint finding against the repository.
This isn't caught because `lint-actions` is a sparse checkout, which
doesn't include the in-repo Actions themselves, which is fixed in a
follow-up commit.
Co-authored-by: Claude Fable 5 <jamie.tanna+claude-code@mend.io >
2026-08-18 11:04:13 +01:00
6a7683b750
ci: correctly generate prefetch matrix cache key
...
As `setup-node` currently uses a hash based on
`hashFiles('pnpm-lock.yaml', 'package.json')`, but we weren't doing the
same here, we would always have a cache miss, and we would need to run
the macOS prefetch, regardless of whether the cache was warm or cold.
Co-authored-by: Claude Fable 5 <jamie.tanna+claude-code@mend.io >
2026-08-18 11:04:13 +01:00
30cd3d8b8c
chore(deps): update pnpm/setup action to v2.0.2 (main) ( #45178 )
...
chore(deps): update pnpm/setup action to v2.0.2
| datasource | package | from | to |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v2.0.1 | v2.0.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-09 23:25:51 +00:00
ed81456807
chore(deps): update pnpm/setup action to v2.0.1 (main) ( #45129 )
...
chore(deps): update pnpm/setup action to v2.0.1
| datasource | package | from | to |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v2.0.0 | v2.0.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-07 11:29:42 +00:00
ec7aadbca9
chore(deps): update actions/cache action to v6 (main) ( #45104 )
...
chore(deps): update actions/cache action to v6
| datasource | package | from | to |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.1.0 | v6.1.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-06 08:03:38 +00:00
da0534a932
chore(deps): update pnpm/setup action to v2 (main) ( #45102 )
...
chore(deps): update pnpm/setup action to v2
| datasource | package | from | to |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v1.0.0 | v2.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-06 06:28:50 +00:00
144ba373a4
ci: migrate to pnpm/setup ( #45035 )
...
* ci: migrate to `pnpm/setup`
As part of ongoing issues we're seeing related to
https://github.com/pnpm/action-setup/issues/277 , we've fixed this
upstream. However, while investigating, the README notes that the
`pnpm/setup` Action should be used for pnpm 11+.
Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io >
* fixup! ci: migrate to `pnpm/setup`
---------
Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io >
2026-08-05 14:41:20 +00:00
87ee522cae
chore(deps): update pnpm/action-setup action to v6.0.10 (main) ( #45038 )
...
chore(deps): update pnpm/action-setup action to v6.0.10
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------- |
| github-tags | pnpm/action-setup | v6.0.9 | v6.0.10 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-03 12:36:26 +00:00
170b972320
ci: extend old vm workaround to build-docker job ( #44614 )
...
* ci: apply disk cleanup workaround to build-docker job too
* ci: fold disk-space cleanup into setup-docker action
* ci: fix typo in setup-docker step name
* Another casing fix
* ci: show final disk usage in build-docker even on failure
* Trigger pipeline (empty commit)
* Trigger pipeline (empty commit)
* Trigger pipeline (empty commit)
* TEMP: Forcefully run cleanup
* Revert "TEMP: Forcefully run cleanup"
This reverts commit 062b76e39c
2026-07-15 18:43:19 +00:00
a283ebabd0
chore(deps): update actions/setup-node action to v6.5.0 (main) ( #44547 )
...
chore(deps): update actions/setup-node action to v6.5.0
| datasource | package | from | to |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.4.0 | v6.5.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-14 03:27:57 +00:00
0daf9ed1bd
chore(deps): update actions/cache action to v5.1.0 (main) ( #44264 )
...
chore(deps): update actions/cache action to v5.1.0
| datasource | package | from | to |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.0.5 | v5.1.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-01 14:31:33 +00:00
0f6134d2ae
chore(deps): update docker/setup-qemu-action action to v4.2.0 (main) ( #44320 )
...
chore(deps): update docker/setup-qemu-action action to v4.2.0
| datasource | package | from | to |
| ----------- | ------------------------ | ------ | ------ |
| github-tags | docker/setup-qemu-action | v4.1.0 | v4.2.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-01 13:26:31 +00:00
b394c7c44b
ci: use mnt for docker for older gh runners ( #44091 )
2026-06-19 05:18:49 +00:00
e6a624ea15
chore(deps): update pnpm/action-setup action to v6.0.9 (main) ( #44008 )
...
chore(deps): update pnpm/action-setup action to v6.0.9
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v6.0.8 | v6.0.9 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-15 12:39:41 +00:00
6fd6887432
ci: centralize docker setup ( #43937 )
...
* ci: centralize docker setup
* ci: remove emojis
2026-06-11 13:03:01 +00:00
52f44047e4
chore(deps): update pnpm/action-setup action to v6.0.8 (main) ( #43277 )
...
chore(deps): update pnpm/action-setup action to v6.0.8
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v6.0.7 | v6.0.8 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-12 13:23:55 +00:00
8c89181b37
chore(deps): update pnpm/action-setup action to v6 (main) ( #42618 )
...
chore(deps): update pnpm/action-setup action to v6
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v5.0.0 | v6.0.7 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-12 12:21:28 +00:00
970113cfb8
chore(deps): update actions/setup-node action to v6.4.0 (main) ( #42756 )
...
chore(deps): update actions/setup-node action to v6.4.0
| datasource | package | from | to |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.3.0 | v6.4.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-20 04:28:40 +00:00
7eee33834b
chore(deps): update nick-fields/retry action to v4 (main) ( #42617 )
...
chore(deps): update nick-fields/retry action to v4
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | nick-fields/retry | v3.0.2 | v4.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-14 10:01:45 +00:00
a808338132
chore(deps): update actions/cache action to v5.0.5 (main) ( #42598 )
...
chore(deps): update actions/cache action to v5.0.5
| datasource | package | from | to |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.0.4 | v5.0.5 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-13 16:30:03 +00:00
e19e094603
chore(deps): update actions/cache action to v5.0.4 (main) ( #41991 )
...
chore(deps): update actions/cache action to v5.0.4
| datasource | package | from | to |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.0.3 | v5.0.4 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-18 15:34:30 +00:00
fcab80fcf3
chore(deps): update pnpm/action-setup action to v5 (main) ( #41988 )
...
chore(deps): update pnpm/action-setup action to v5
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v4.4.0 | v5.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-18 12:52:07 +00:00
447ec1a4ac
chore(deps): update pnpm/action-setup action to v4.4.0 (main) ( #41888 )
...
chore(deps): update pnpm/action-setup action to v4.4.0
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v4.3.0 | v4.4.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-13 11:29:36 +00:00
58f20c25bc
chore(deps): update pnpm/action-setup action to v4.3.0 (main) ( #41821 )
...
chore(deps): update pnpm/action-setup action to v4.3.0
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v4.2.0 | v4.3.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-11 15:32:08 +00:00
48b2f40d94
chore(deps): update actions/setup-node action to v6.3.0 (main) ( #41643 )
...
chore(deps): update actions/setup-node action to v6.3.0
| datasource | package | from | to |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.2.0 | v6.3.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-04 03:38:14 +00:00
df74ff5302
style: fix actionlint errors ( #41296 )
...
* style: remove unnecessary echo
Via `actionlint`.
Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io >
* style: add deployment step id for page_url reference
Via `actionlint`.
Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io >
* style: quote `GITHUB_OUTPUT` variable
Via `actionlint`, this is a `shellcheck` warning.
Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io >
* style: replace deprecated `set-output` with `GITHUB_OUTPUT`
Via `actionlint`
Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io >
* style: fix `shellcheck` issues
Via `actionlint`.
Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io >
* style: quote `GITHUB_WORKSPACE`
Via `actionlint`, via `shellcheck`.
Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io >
* style: add description field to `calculate-prefetch-matrix` action
Via `actionlint`.
Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io >
---------
Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io >
2026-02-18 16:09:06 +00:00
8a11937150
ci: don't allow empty node-version or os ( #41290 )
...
As found in #41288 and #41289 , it turns out that even when a parameter
is marked as `required: true`, it can be provided as the empty string.
To make sure this can never happen, we can add additional validation
before we start `setup-node` to make sure the parameters are set.
Co-authored-by: gpt-4.1 <jamie.tanna+github-copilot@mend.io >
2026-02-18 11:00:33 +00:00
eb7d33ce6f
chore(deps): update actions/cache action to v5 (main) ( #40820 )
...
chore(deps): update actions/cache action to v5
| datasource | package | from | to |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v4.3.0 | v5.0.3 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-30 21:05:57 +00:00
678656c8ae
chore(deps): update actions/setup-node action to v6.2.0 (main) ( #40436 )
...
chore(deps): update actions/setup-node action to v6.2.0
| datasource | package | from | to |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.1.0 | v6.2.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-15 03:28:00 +00:00
62ea35062a
chore(deps): update actions/setup-node action to v6.1.0 (main) ( #39721 )
...
chore(deps): update actions/setup-node action to v6.1.0
| datasource | package | from | to |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.0.0 | v6.1.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-03 04:25:30 +00:00
dfe4b20432
chore(deps): update actions/setup-node action to v6 (main) ( #39098 )
...
chore(deps): update actions/setup-node action to v6
| datasource | package | from | to |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v4.4.0 | v6.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-05 11:29:20 +00:00
4170c20095
ci: skip windows prefetch steps ( #38603 )
2025-10-14 09:45:56 +00:00
409f8c50ec
chore(deps): update pnpm/action-setup action to v4.2.0 (main) ( #38458 )
...
chore(deps): update pnpm/action-setup action to v4.2.0
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v4.1.0 | v4.2.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-08 09:29:48 +00:00
f1cca44592
chore(deps): update actions/cache action to v4.3.0 (main) ( #38205 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-24 14:23:14 +00:00
f7a171394d
chore(deps): update actions/cache action to v4.2.4 (main) ( #37368 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-07 13:25:18 +00:00
316e68da38
chore(deps): update actions/setup-node action to v4.4.0 (main) ( #35359 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-14 04:09:49 +00:00
c753c52356
chore(deps): update actions/cache action to v4.2.3 (main) ( #34916 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-19 19:19:09 +00:00
803a5f5f48
chore(deps): update actions/setup-node action to v4.3.0 (main) ( #34848 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-17 03:20:18 +00:00
08307f550a
chore(deps): update actions/cache action to v4.2.2 (main) ( #34534 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-27 16:23:17 +00:00
64e5973496
chore(deps): update nick-fields/retry action to v3.0.2 (main) ( #34479 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-26 01:22:49 +00:00
69ef5219fb
chore(deps): update actions/cache action to v4.2.1 ( #34293 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-18 18:21:22 +00:00
5c33660ec2
chore(deps): update nick-fields/retry action to v3.0.1 ( #34271 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-17 21:13:45 +00:00
f7feca4bca
chore(deps): update pnpm/action-setup action to v4.1.0 ( #34073 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-06 22:21:08 +00:00
1838dea3fa
chore(deps): update actions/setup-node action to v4.2.0 ( #33861 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-27 04:20:12 +00:00
renovate[bot]