From cc0db70a925f2d196b54d2ea8f5d0f287f1a63a7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 3 Oct 2026 04:53:44 +0000 Subject: [PATCH] build(deps): bump pnpm/setup from 2.1.0 to 3.0.0 Bumps [pnpm/setup](https://github.com/pnpm/setup) from 2.1.0 to 3.0.0. - [Release notes](https://github.com/pnpm/setup/releases) - [Commits](https://github.com/pnpm/setup/compare/703c52620218391530e48b9e8870d5c0082e1b9b...fbda4c85fc2e1e08721cd8763afea8f48d60f024) --- updated-dependencies: - dependency-name: pnpm/setup dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/reviewer-governance-trust.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index cf3a5bff9..0949ada93 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -44,7 +44,7 @@ jobs: fetch-depth: 0 persist-credentials: false # QNBS-v3: pnpm/setup instead of pnpm/action-setup, mirroring .github/actions/setup/action.yml (duplicated because this job predates the trust boundary it validates and can't use that composite). - - uses: pnpm/setup@703c52620218391530e48b9e8870d5c0082e1b9b # v2.1.0 + - uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3.0.0 with: version: 11.22.0 install: false diff --git a/.github/workflows/reviewer-governance-trust.yml b/.github/workflows/reviewer-governance-trust.yml index 1134ae399..d43b18fc7 100644 --- a/.github/workflows/reviewer-governance-trust.yml +++ b/.github/workflows/reviewer-governance-trust.yml @@ -19,7 +19,7 @@ jobs: with: fetch-depth: 0 persist-credentials: false - - uses: pnpm/setup@703c52620218391530e48b9e8870d5c0082e1b9b # v2.1.0 + - uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3.0.0 with: version: 11.22.0 install: false