chore(deps): bump pnpm/action-setup from 4.3.0 to 6.1.0 by dependabot[bot] · Pull Request #427 · vercel-labs/just-bash

dependabot · 2026-09-12T13:52:52Z

Bumps pnpm/action-setup from 4.3.0 to 6.1.0.

Release notes

Sourced from pnpm/action-setup's releases.

v6.1.0

What's Changed

feat: support pnpm v12 by @zkochan in pnpm/action-setup#288

Full Changelog: pnpm/action-setup@v6.0.10...v6.1.0

v6.0.10

What's Changed

docs(README): point users to the successor pnpm/setup action by @BlackHole1 in pnpm/action-setup#282

refactor: introduce restore keys for cache by @SukkaW in pnpm/action-setup#280

ci: use pnpm 11 for pr-check by @jamietanna in pnpm/action-setup#284

fix: update pnpm to v11.19.0 by @jamietanna in pnpm/action-setup#283

docs: update README to include devEngines.packageManager by @nemchik in pnpm/action-setup#273

New Contributors

@jamietanna made their first contribution in pnpm/action-setup#284

@nemchik made their first contribution in pnpm/action-setup#273

Full Changelog: pnpm/action-setup@v6...v6.0.10

v6.0.9

What's Changed

fix: update pnpm to v11.7.0 by @zkochan in pnpm/action-setup#267

Full Changelog: pnpm/action-setup@v6...v6.0.9

v6.0.8

What's Changed

docs(README): fix cache_dependency_path type by @haines in pnpm/action-setup#257

fix: drop patchPnpmEnv so standalone+self-update works on Windows by @zkochan in pnpm/action-setup#258

fix: update pnpm to 11.1.1 by @mungodewar in pnpm/action-setup#248

New Contributors

@mungodewar made their first contribution in pnpm/action-setup#248

Full Changelog: pnpm/action-setup@v6.0.7...v6.0.8

v6.0.7

What's Changed

fix: honor devEngines.packageManager.onFail=error (#252) by @zkochan in pnpm/action-setup#254

fix: restore inputs from state in post by @haines in pnpm/action-setup#255

fix: self-update bootstrap to packageManager-pinned version (#233) by @zkochan in pnpm/action-setup#256

New Contributors

@haines made their first contribution in pnpm/action-setup#255

Full Changelog: pnpm/action-setup@v6.0.6...v6.0.7

... (truncated)

Commits

ea17c68 feat: support pnpm v12 (#288)
0977fd9 docs: Update README to include devEngines.packageManager (#273)
48261ac fix: update pnpm to v11.19.0 (#283)
75677f7 ci: use pnpm 11 for pr-check (#284)
769ae71 refactor: introduce restore keys for cache (#280)
6fed91f docs(README): point users to the successor pnpm/setup action (#282)
0ebf471 fix: update pnpm to v11.7.0 (#267)
0e279bb fix: update pnpm to 11.1.1 (#248)
3e83581 fix: drop patchPnpmEnv so standalone+self-update works on Windows (#258)
551b42e docs(README): fix cache_dependency_path type (#257)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4.3.0 to 6.1.0. - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](pnpm/action-setup@b906aff...ea17c68) --- updated-dependencies: - dependency-name: pnpm/action-setup dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-12T13:52:53Z

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-09-12T13:52:56Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
just-bash-website	Ready	Preview, v0	Sep 12, 2026 1:53pm UTC

1 Skipped Deployment

Project	Deployment	Actions	Updated
just-bash	Ignored	v0	Sep 12, 2026 1:53pm UTC

socket-security · 2026-09-12T13:53:15Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github/pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 ⏵ ea17c68df8912ef543352723c149a84f56e3d413	⁺¹

View full report

auto-maintain · 2026-09-12T13:54:08Z

🤖 auto-maintain review

Automated, advisory triage for @dependabot[bot]'s PR. Facts below are read from the GitHub API.

Check	Result
Author's merged PRs (this repo)	0 — ⚠️ first-time contributor
Account established	⚠️ (age 2705d · 0 followers · 0 public repos)
Commits signed/verified	✅ 1/1
Changeset included	⚠️

Review panel: 🟢 low highest severity

just-bash maintainer code review: 🟢 low

No actionable issues found; the pinned action upgrade is applied consistently across all workflows.

General code review: 🟢 low

No actionable issues found in the dependency update.

Adversarial security: 🟢 low

No actionable security issues found in the pinned pnpm/action-setup upgrade.

Adversarial security (second opinion): 🟢 low

Diff is limited to bumping the SHA-pinned pnpm/action-setup reference (b906aff → ea17c68, v4 → v6.1.0) in six workflows; no inputs, permissions, secrets, or source code change, pnpm stays pinned via package.json packageManager with an integrity hash, and the new SHA matches the commit listed in the upstream v6.1.0 release notes. No actionable security findings.

Standard Bash and host portability: 🟢 low

No Bash or host-portability issues found in the action version bump.

_{Posted by auto-maintain. This automated code review is advisory; a human maintainer makes the call.}

dependabot Bot requested a review from cramforce as a code owner September 12, 2026 13:52

dependabot Bot mentioned this pull request Sep 12, 2026

build(deps): bump pnpm/action-setup from 4.3.0 to 6.0.10 #344

Closed

vercel Bot deployed to Preview – just-bash-website September 12, 2026 13:53 View deployment

Navigation Menu

chore(deps): bump pnpm/action-setup from 4.3.0 to 6.1.0 - #427

chore(deps): bump pnpm/action-setup from 4.3.0 to 6.1.0#427
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/pnpm/action-setup-6.1.0

dependabot Bot commented on behalf of github Sep 12, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 12, 2026

Uh oh!

vercel Bot commented Sep 12, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 12, 2026

Uh oh!

auto-maintain Bot commented Sep 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 12, 2026

v6.1.0

What's Changed

v6.0.10

What's Changed

New Contributors

v6.0.9

What's Changed

v6.0.8

What's Changed

New Contributors

v6.0.7

What's Changed

New Contributors

Uh oh!

dependabot Bot commented on behalf of github Sep 12, 2026

Labels

Uh oh!

vercel Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Sep 12, 2026

Uh oh!

auto-maintain Bot commented Sep 12, 2026

🤖 auto-maintain review

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

vercel Bot commented Sep 12, 2026 •

edited

Loading