f52a8ae5cf
chore(deps): update pnpm/setup action to v3.1.1 (main) ( #46906 )
...
chore(deps): update pnpm/setup action to v3.1.1
| datasource | package | from | to |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v3.0.0 | v3.1.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 20:30:51 +00:00
dcd8efae1a
chore(deps): update pnpm/setup action to v3 (main) ( #46788 )
...
chore(deps): update pnpm/setup action to v3
| datasource | package | from | to |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v2.1.0 | v3.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-06 08:34:31 +00:00
b62fe59594
fix: remove references to "bot" ( #39305 )
...
We dropped the "bot" from our terminology long ago, but it looks like
we've got some outdated docs + code that reference it.
We should remove this to keep things consistent.
A `fix`, as we're changing the commit author's name, and log lines.
Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-09-02 08:56:20 +00:00
2b56b52933
chore(deps): update pnpm/setup action to v2.1.0 (main) ( #45543 )
...
chore(deps): update pnpm/setup action to v2.1.0
| datasource | package | from | to |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v2.0.2 | v2.1.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-29 00:28:18 +00:00
34c7bcb7a5
ci: never restore caches into the release job
...
When running the Release job, we restore our `node_modules` cache via
`setup-node`. This leads to `semantic-release` executing - with
`contents: write`, `packages: write`, `id-token: write` and Docker Hub
credentials - the release process.
If we were to have a poisoned cache, this could lead to backdoored npm
packages and Docker images.
Although not currently exploitable, we should further harden this by:
- never using the cache for `release` jobs
- requiring a full `pnpm install --frozen-lockfile` on release jobs
- increasing the build time slightly on release jobs
This ensures that we don't leave ourselves vulnerable to cache poisoning
in the future.
It appears that zizmor's `cache-poisoning` audit covers this pattern,
but doesn't recognise a branch-push `semantic-release` job as a release
workflow, so won't flag regressions here.
Co-authored-by: Claude Fable 5 <jamie.tanna+claude-code@mend.io >
2026-08-18 11:04:13 +01:00
30cd3d8b8c
chore(deps): update pnpm/setup action to v2.0.2 (main) ( #45178 )
...
chore(deps): update pnpm/setup action to v2.0.2
| datasource | package | from | to |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v2.0.1 | v2.0.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-09 23:25:51 +00:00
ed81456807
chore(deps): update pnpm/setup action to v2.0.1 (main) ( #45129 )
...
chore(deps): update pnpm/setup action to v2.0.1
| datasource | package | from | to |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v2.0.0 | v2.0.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-07 11:29:42 +00:00
ec7aadbca9
chore(deps): update actions/cache action to v6 (main) ( #45104 )
...
chore(deps): update actions/cache action to v6
| datasource | package | from | to |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.1.0 | v6.1.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-06 08:03:38 +00:00
da0534a932
chore(deps): update pnpm/setup action to v2 (main) ( #45102 )
...
chore(deps): update pnpm/setup action to v2
| datasource | package | from | to |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v1.0.0 | v2.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-06 06:28:50 +00:00
144ba373a4
ci: migrate to pnpm/setup ( #45035 )
...
* ci: migrate to `pnpm/setup`
As part of ongoing issues we're seeing related to
https://github.com/pnpm/action-setup/issues/277 , we've fixed this
upstream. However, while investigating, the README notes that the
`pnpm/setup` Action should be used for pnpm 11+.
Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io >
* fixup! ci: migrate to `pnpm/setup`
---------
Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io >
2026-08-05 14:41:20 +00:00
87ee522cae
chore(deps): update pnpm/action-setup action to v6.0.10 (main) ( #45038 )
...
chore(deps): update pnpm/action-setup action to v6.0.10
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------- |
| github-tags | pnpm/action-setup | v6.0.9 | v6.0.10 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-03 12:36:26 +00:00
a283ebabd0
chore(deps): update actions/setup-node action to v6.5.0 (main) ( #44547 )
...
chore(deps): update actions/setup-node action to v6.5.0
| datasource | package | from | to |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.4.0 | v6.5.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-14 03:27:57 +00:00
0daf9ed1bd
chore(deps): update actions/cache action to v5.1.0 (main) ( #44264 )
...
chore(deps): update actions/cache action to v5.1.0
| datasource | package | from | to |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.0.5 | v5.1.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-01 14:31:33 +00:00
e6a624ea15
chore(deps): update pnpm/action-setup action to v6.0.9 (main) ( #44008 )
...
chore(deps): update pnpm/action-setup action to v6.0.9
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v6.0.8 | v6.0.9 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-15 12:39:41 +00:00
52f44047e4
chore(deps): update pnpm/action-setup action to v6.0.8 (main) ( #43277 )
...
chore(deps): update pnpm/action-setup action to v6.0.8
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v6.0.7 | v6.0.8 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-12 13:23:55 +00:00
8c89181b37
chore(deps): update pnpm/action-setup action to v6 (main) ( #42618 )
...
chore(deps): update pnpm/action-setup action to v6
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v5.0.0 | v6.0.7 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-12 12:21:28 +00:00
970113cfb8
chore(deps): update actions/setup-node action to v6.4.0 (main) ( #42756 )
...
chore(deps): update actions/setup-node action to v6.4.0
| datasource | package | from | to |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.3.0 | v6.4.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-20 04:28:40 +00:00
7eee33834b
chore(deps): update nick-fields/retry action to v4 (main) ( #42617 )
...
chore(deps): update nick-fields/retry action to v4
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | nick-fields/retry | v3.0.2 | v4.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-14 10:01:45 +00:00
a808338132
chore(deps): update actions/cache action to v5.0.5 (main) ( #42598 )
...
chore(deps): update actions/cache action to v5.0.5
| datasource | package | from | to |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.0.4 | v5.0.5 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-13 16:30:03 +00:00
e19e094603
chore(deps): update actions/cache action to v5.0.4 (main) ( #41991 )
...
chore(deps): update actions/cache action to v5.0.4
| datasource | package | from | to |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.0.3 | v5.0.4 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-18 15:34:30 +00:00
fcab80fcf3
chore(deps): update pnpm/action-setup action to v5 (main) ( #41988 )
...
chore(deps): update pnpm/action-setup action to v5
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v4.4.0 | v5.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-18 12:52:07 +00:00
447ec1a4ac
chore(deps): update pnpm/action-setup action to v4.4.0 (main) ( #41888 )
...
chore(deps): update pnpm/action-setup action to v4.4.0
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v4.3.0 | v4.4.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-13 11:29:36 +00:00
58f20c25bc
chore(deps): update pnpm/action-setup action to v4.3.0 (main) ( #41821 )
...
chore(deps): update pnpm/action-setup action to v4.3.0
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v4.2.0 | v4.3.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-11 15:32:08 +00:00
48b2f40d94
chore(deps): update actions/setup-node action to v6.3.0 (main) ( #41643 )
...
chore(deps): update actions/setup-node action to v6.3.0
| datasource | package | from | to |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.2.0 | v6.3.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-04 03:38:14 +00:00
8a11937150
ci: don't allow empty node-version or os ( #41290 )
...
As found in #41288 and #41289 , it turns out that even when a parameter
is marked as `required: true`, it can be provided as the empty string.
To make sure this can never happen, we can add additional validation
before we start `setup-node` to make sure the parameters are set.
Co-authored-by: gpt-4.1 <jamie.tanna+github-copilot@mend.io >
2026-02-18 11:00:33 +00:00
eb7d33ce6f
chore(deps): update actions/cache action to v5 (main) ( #40820 )
...
chore(deps): update actions/cache action to v5
| datasource | package | from | to |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v4.3.0 | v5.0.3 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-30 21:05:57 +00:00
678656c8ae
chore(deps): update actions/setup-node action to v6.2.0 (main) ( #40436 )
...
chore(deps): update actions/setup-node action to v6.2.0
| datasource | package | from | to |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.1.0 | v6.2.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-15 03:28:00 +00:00
62ea35062a
chore(deps): update actions/setup-node action to v6.1.0 (main) ( #39721 )
...
chore(deps): update actions/setup-node action to v6.1.0
| datasource | package | from | to |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.0.0 | v6.1.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-03 04:25:30 +00:00
dfe4b20432
chore(deps): update actions/setup-node action to v6 (main) ( #39098 )
...
chore(deps): update actions/setup-node action to v6
| datasource | package | from | to |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v4.4.0 | v6.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-05 11:29:20 +00:00
409f8c50ec
chore(deps): update pnpm/action-setup action to v4.2.0 (main) ( #38458 )
...
chore(deps): update pnpm/action-setup action to v4.2.0
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v4.1.0 | v4.2.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-08 09:29:48 +00:00
f1cca44592
chore(deps): update actions/cache action to v4.3.0 (main) ( #38205 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-24 14:23:14 +00:00
f7a171394d
chore(deps): update actions/cache action to v4.2.4 (main) ( #37368 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-07 13:25:18 +00:00
316e68da38
chore(deps): update actions/setup-node action to v4.4.0 (main) ( #35359 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-14 04:09:49 +00:00
c753c52356
chore(deps): update actions/cache action to v4.2.3 (main) ( #34916 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-19 19:19:09 +00:00
803a5f5f48
chore(deps): update actions/setup-node action to v4.3.0 (main) ( #34848 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-17 03:20:18 +00:00
08307f550a
chore(deps): update actions/cache action to v4.2.2 (main) ( #34534 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-27 16:23:17 +00:00
64e5973496
chore(deps): update nick-fields/retry action to v3.0.2 (main) ( #34479 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-26 01:22:49 +00:00
69ef5219fb
chore(deps): update actions/cache action to v4.2.1 ( #34293 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-18 18:21:22 +00:00
5c33660ec2
chore(deps): update nick-fields/retry action to v3.0.1 ( #34271 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-17 21:13:45 +00:00
f7feca4bca
chore(deps): update pnpm/action-setup action to v4.1.0 ( #34073 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-06 22:21:08 +00:00
1838dea3fa
chore(deps): update actions/setup-node action to v4.2.0 ( #33861 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-27 04:20:12 +00:00
2b17eea5f4
chore(deps): update actions/cache action to v4.2.0 ( #32931 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-05 20:28:22 +00:00
5ce7f7649c
chore(deps): update actions/setup-node action to v4.1.0 ( #32127 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-24 16:02:39 +00:00
41afec3a3d
chore(deps): update actions/cache action to v4.1.2 ( #32086 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-22 16:48:58 +00:00
866bdfab3b
chore(deps): update actions/cache action to v4.1.1 ( #31861 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-08 18:16:13 +00:00
d2526b9d3c
chore(deps): update actions/cache action to v4.1.0 ( #31804 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-04 22:02:52 +00:00
fdcbcb82bd
chore(deps): update actions/setup-node action to v4.0.4 ( #31484 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-19 15:05:39 +00:00
2695ca9fc5
chore(deps): update actions/setup-node action to v4.0.3 ( #30103 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-09 15:42:18 +00:00
a0c447a82b
ci(setup-node): fix steps order ( #29965 )
2024-07-01 13:37:43 +00:00
174b1bf54e
ci: fix cache keys ( #29962 )
2024-07-01 12:51:37 +00:00
renovate[bot]