Skip to content

chore(deps): pin dependencies - #406

Open
team-github-bot wants to merge 1 commit into
mainfrom
renovate/github-actions
Open

team-github-bot wants to merge 1 commit into
mainfrom
renovate/github-actions

Conversation

@team-github-bot

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/checkout action pin v6 → v6.1.0
actions/checkout action pin v3 → v3.7.0
actions/setup-node action pin v6 → v6.5.0
actions/upload-artifact action pin v5 → v5.0.0
github/codeql-action action pin v4 → v4.39.1

Manual supply-chain check: minimumReleaseAge cannot be enforced for pin/digest updates because they have no release timestamp. Before merging, confirm this commit SHA has been published for at least 2 days.

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.


Configuration

📅 Schedule: (in timezone Australia/Brisbane)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@team-github-bot team-github-bot added the dependencies Pull requests that update a dependency file label Oct 30, 2026
@team-github-bot
team-github-bot requested a review from a team October 30, 2026 17:11
@team-github-bot
team-github-bot requested a review from a team as a code owner October 30, 2026 17:11
@team-github-bot

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: .github/workflows/test-login.yml
Command failed: /bin/sh -c npm ci --ignore-scripts && npm run build
/bin/sh: 1: npm: not found

File name: .github/workflows/release-please.yml
Command failed: /bin/sh -c npm ci --ignore-scripts && npm run build
/bin/sh: 1: npm: not found

File name: .github/workflows/codeql.yml
Command failed: /bin/sh -c npm ci --ignore-scripts && npm run build
/bin/sh: 1: npm: not found

File name: .github/workflows/build-and-test.yml
Command failed: /bin/sh -c npm ci --ignore-scripts && npm run build
/bin/sh: 1: npm: not found

File name: .github/workflows/build-and-test.yml
Command failed: /bin/sh -c npm ci --ignore-scripts && npm run build
/bin/sh: 1: npm: not found

File name: .github/workflows/build-and-test.yml
Command failed: /bin/sh -c npm ci --ignore-scripts && npm run build
/bin/sh: 1: npm: not found

File name: .github/workflows/build-and-test.yml
Command failed: /bin/sh -c npm ci --ignore-scripts && npm run build
/bin/sh: 1: npm: not found

File name: .github/workflows/codeql.yml
Command failed: /bin/sh -c npm ci --ignore-scripts && npm run build
/bin/sh: 1: npm: not found

File name: .github/workflows/codeql.yml
Command failed: /bin/sh -c npm ci --ignore-scripts && npm run build
/bin/sh: 1: npm: not found

File name: .github/workflows/codeql.yml
Command failed: /bin/sh -c npm ci --ignore-scripts && npm run build
/bin/sh: 1: npm: not found

@team-github-bot
team-github-bot force-pushed the renovate/github-actions branch from 294368a to 146e52f Compare October 31, 2026 17:09
@team-github-bot
team-github-bot force-pushed the renovate/github-actions branch from 146e52f to dcb1399 Compare November 1, 2026 17:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants