[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
pnpm/action-setup	action	patch	v6.1.0 → v6.1.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

pnpm/action-setup

v6.1.1

Compare Source

What's Changed

• fix: refresh native bootstrap and test shared store reuse by @​zkochan in #​293
• fix: update pnpm 11 bootstrap to 11.28.10 by @​rstacruz25 in #​292
• chore: update pinned GitHub Actions by @​deining in #​223
• fix: skip saving missing cache directories by @​zkochan in #​294
• docs: clarify manifest-based version selection by @​djmurphy32 in #​244

New Contributors

• @​rstacruz25 made their first contribution in #​292
• @​djmurphy32 made their first contribution in #​244

Full Changelog: pnpm/action-setup@v6.1.0...v6.1.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Copilot]

🟢 Approval recommended

The dependency pins and version annotations are consistent across all affected actions.

0 open findings

What changed in this PR

Updates pinned CI action dependencies across reusable composite actions.

Changes:

• Updates actions/upload-artifact to v7.0.2.
• Updates actions/setup-node to v7.1.0.
• Updates bridgecrewio/checkov-action to v12.3132.0.

File	Description
.github/​actions/​trivy/​action.yaml	Updates SBOM artifact upload action.
.github/​actions/​trivy-license/​action.yaml	Updates license report upload action.
.github/​actions/​terraform-validate/​action.yaml	Updates validation log upload action.
.github/​actions/​python-build/​action.yaml	Updates coverage artifact upload action.
.github/​actions/​pre-commit/​action.yaml	Updates Node.js setup action.
.github/​actions/​checkov/​action.yaml	Updates Checkov scanning action.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

🟢 Approval recommended

The pinned action updates are consistent across all affected workflows and introduce no apparent configuration issues.

0 open findings

🧠 Review effort: Balanced

[Copilot]

🟢 Approval recommended

The action references are consistently updated to pinned commits matching the documented releases.

0 open findings

🧠 Review effort: Balanced

[Copilot]

🟢 Approval recommended

The dependency pins and version annotations are consistent, complete, and preserve existing workflow behavior.

0 open findings

🧠 Review effort: Balanced

[Copilot]

🟢 Approval recommended

All dependency pins and version annotations are consistently updated with no unresolved issues.

0 open findings

🧠 Review effort: Balanced

[Copilot]

🟢 Approval recommended

These narrowly scoped minor and patch dependency updates preserve existing configuration, with no blocking issues identified.

No open issues 🎉

_{Review effort: Balanced}

[Copilot]

🟢 Approval recommended

These scoped minor and patch updates preserve existing configuration, with no blocking issues identified.

No open issues 🎉

_{Review effort: Balanced}

[Copilot]

🟢 Approval recommended

The changes are limited to minor and patch dependency updates, with no identified compatibility issues or blocking findings.

No open issues 🎉

_{Review effort: Balanced}

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[Copilot]

🟢 Approval recommended

The changes are limited to minor and patch dependency updates, with no blocking issues identified.

No open issues 🎉

_{Review effort: Balanced}

[Copilot]

🟢 Approval recommended

The scoped dependency update preserves the wrapper’s input contract, and no blocking issues were identified.

No open issues 🎉

_{Review effort: Balanced}