Skip to content

build(deps): bump pnpm/action-setup from 4 to 5#96

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/pnpm/action-setup-5
Open

build(deps): bump pnpm/action-setup from 4 to 5#96
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/pnpm/action-setup-5

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 6, 2026 •
edited
Loading

Bumps pnpm/action-setup from 4 to 5.

Release notes

Sourced from pnpm/action-setup's releases.

v5.0.0

Updated the action to use Node.js 24.

v4.4.0

Updated the action to use Node.js 24.

v4.3.0

What's Changed

New Contributors

Full Changelog: pnpm/action-setup@v4.2.0...v4.3.0

v4.2.0

When there's a .npmrc file at the root of the repository, pnpm will be fetched from the registry that is specified in that .npmrc file #179

v4.1.0

Add support for package.yaml #156.

Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 6, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 6, 2026

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

cubic-dev-ai[bot]
cubic-dev-ai Bot reviewed Apr 6, 2026
View reviewed changes
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

devin-ai-integration[bot]
devin-ai-integration Bot reviewed Apr 6, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@devin-ai-integration devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 1 additional finding.

Open in Devin Review

@dependabot dependabot Bot changed the title chore(deps): bump pnpm/action-setup from 4 to 5 build(deps): bump pnpm/action-setup from 4 to 5 Apr 7, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/pnpm/action-setup-5 branch 6 times, most recently from 089c180 to 421135b Compare April 10, 2026 00:06
@dependabot dependabot Bot force-pushed the dependabot/github_actions/pnpm/action-setup-5 branch 2 times, most recently from ffaa6a6 to ed4dd3e Compare April 17, 2026 23:27
propel-code-bot[bot]
propel-code-bot Bot reviewed Apr 17, 2026
View reviewed changes
Copy link
Copy Markdown

@propel-code-bot propel-code-bot Bot left a comment •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency bump from pnpm/action-setup v4 to v5 was reviewed and no issues were found.

Status: No Issues Found | Risk: Low

Review Details

📁 1 files reviewed | 💬 0 comments

Instruction Files 
├── AGENTS.md
└── CLAUDE.md

@dependabot dependabot Bot force-pushed the dependabot/github_actions/pnpm/action-setup-5 branch from ed4dd3e to 404880c Compare April 18, 2026 00:32
devin-ai-integration[bot]
devin-ai-integration Bot reviewed Apr 18, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@devin-ai-integration devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 new potential issue.

View 2 additional findings in Devin Review.

Open in Devin Review

Comment thread .github/workflows/deploy-frontend.yml

- name: Install pnpm
uses: pnpm/action-setup@v4
uses: pnpm/action-setup@v6
Copy link
Copy Markdown
Contributor

@devin-ai-integration devin-ai-integration Bot Apr 18, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔴 pnpm/action-setup bumped to non-existent v6 instead of v5

The commit message (generated by Dependabot) explicitly states "bump pnpm/action-setup from 4 to 5" and links to the v4...v5 comparison, but the actual code change sets pnpm/action-setup@v6 instead of @v5. The v6 tag almost certainly does not exist on the pnpm/action-setup repository, which will cause the workflow to fail at the "Install pnpm" step on every frontend deploy. The rest of the repo already uses v5 — the shared composite action at .github/actions/setup-node-pnpm/action.yml:7 pins to pnpm/action-setup@b307475762933b98ed359c036b0e51f26b63b74b # v5.0.0.

Suggested change
uses: pnpm/action-setup@v6
uses: pnpm/action-setup@v5
Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/pnpm/action-setup-5 branch 2 times, most recently from f7ada68 to 5b930ab Compare April 18, 2026 04:00
@dependabot
chore(deps): bump pnpm/action-setup from 4 to 5
cac7dbc 
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4 to 5.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@v4...v5)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/pnpm/action-setup-5 branch from 5b930ab to cac7dbc Compare April 18, 2026 16:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@devin-ai-integration devin-ai-integration[bot] devin-ai-integration[bot] left review comments

@cubic-dev-ai cubic-dev-ai[bot] cubic-dev-ai[bot] left review comments

@propel-code-bot propel-code-bot[bot] propel-code-bot[bot] left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants