chore(deps): update pnpm/action-setup digest to b906aff - #1872
chore(deps): update pnpm/action-setup digest to b906aff#1872renovate[bot] wants to merge 1 commit into
Conversation
|
1cc4b25 to
f8f786f
Compare
f8f786f to
4eefc40
Compare
4eefc40 to
535d364
Compare
181f987 to
dd64685
Compare
b8c0424 to
b368d52
Compare
7ed51b9 to
d7c1142
Compare
d7c1142 to
e6f78d8
Compare
e6f78d8 to
78dd180
Compare
78dd180 to
f3ec40e
Compare
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit f3ec40e. Configure here.
| fetch-depth: 0 | ||
|
|
||
| - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4 | ||
| - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4 |
There was a problem hiding this comment.
Action digest silently downgraded
Medium Severity
This Renovate digest update moves pnpm/action-setup from fc06bc1 back to b906aff, which is an older commit on the v4 line. Upstream order is b906aff (revert to node20, v4.3.0) then fc06bc1 (Node 24, v4.4.0); other repos updated in the forward direction. The change reintroduces a deprecated Node 20 action runtime across CI and release workflows, with hard failure risk when GitHub removes Node 20 later in 2026. The PR warning that some dependencies could not be looked up also suggests a bad digest resolution.
Additional Locations (2)
Reviewed by Cursor Bugbot for commit f3ec40e. Configure here.


This PR contains the following updates:
fc06bc1→b906affWarning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Configuration
📅 Schedule: (UTC)
* 0-3 1 * *)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.