Bump github actions

[dependabot]

Bumps the dependencies group with 3 updates in the / directory: pnpm/action-setup, peter-evans/create-pull-request and softprops/action-gh-release.

Updates pnpm/action-setup from 3 to 4

Release notes

Sourced from pnpm/action-setup's releases.

v4.0.0

An error is thrown if one version of pnpm is specified in the packageManager field of package.json and a different version is specified in the action's settings #122

Commits

• fe02b34 docs: bump action-setup version in README
• bee1f09 feat: throw error when multiple versions specified (#122)
• ce859e3 refactor: replace fs-extra with Node.js built-in fs methods (#120)
• 2ab6dce docs(README): fix link to LICENSE
• e280758 docs(README): update dependency versions (#117)
• 129abb7 Bump undici from 5.28.2 to 5.28.3 (#115)
• See full diff in compare view

Updates peter-evans/create-pull-request from 6.0.2 to 6.0.5

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v6.0.5

⚙️ Fixes an issue with proxy support for users that run self-hosted behind a proxy.

What's Changed

• fix: update proxy support to follow octokit change to fetch api by @​peter-evans in peter-evans/create-pull-request#2867

Full Changelog: peter-evans/create-pull-request@v6.0.4...v6.0.5

Create Pull Request v6.0.4

⚡ Improves performance in some cases for very large git repositories.

What's Changed

• perf: limit the fetch depth of pr branch by @​peter-evans in peter-evans/create-pull-request#2857

Full Changelog: peter-evans/create-pull-request@v6.0.3...v6.0.4

Create Pull Request v6.0.3

⚡ Improves performance of the push-to-fork feature.

What's Changed

• build(deps-dev): bump @​types/node from 18.19.23 to 18.19.25 by @​dependabot in peter-evans/create-pull-request#2826
• build(deps-dev): bump @​types/node from 18.19.25 to 18.19.26 by @​dependabot in peter-evans/create-pull-request#2831
• build(deps-dev): bump @​types/node from 18.19.26 to 18.19.28 by @​dependabot in peter-evans/create-pull-request#2836
• build(deps-dev): bump @​types/node from 18.19.28 to 18.19.31 by @​dependabot in peter-evans/create-pull-request#2842
• fix: drop unnecessary fetch with unshallow on push-to-fork by @​peter-evans in peter-evans/create-pull-request#2849

Full Changelog: peter-evans/create-pull-request@v6.0.2...v6.0.3

Commits

• 6d6857d fix: update proxy support to follow octokit change to fetch api (#2867)
• 9153d83 perf: limit the fetch depth of pr branch (#2857)
• c55203c fix: drop unnecessary fetch with unshallow on push-to-fork (#2849)
• 6ce4eca build(deps-dev): bump @​types/node from 18.19.28 to 18.19.31 (#2842)
• 36ef0ed build(deps-dev): bump @​types/node from 18.19.26 to 18.19.28 (#2836)
• 8500972 build(deps-dev): bump @​types/node from 18.19.25 to 18.19.26 (#2831)
• bda5ade build(deps-dev): bump @​types/node from 18.19.23 to 18.19.25 (#2826)
• See full diff in compare view

Updates softprops/action-gh-release from 2.0.4 to 2.0.5

Release notes

Sourced from softprops/action-gh-release's releases.

v2.0.5

• Factor in file names with spaces when upserting files #446 via @​MystiPanda
• Improvements to error handling #449 via @​till

Changelog

Sourced from softprops/action-gh-release's changelog.

2.0.5

• Factor in file names with spaces when upserting files #446 via @​MystiPanda
• Improvements to error handling #449 via @​till

2.0.4

• Minor follow up to #417. #425

2.0.3

• Declare make_latest as an input field in action.yml #419

2.0.2

• Revisit approach to #384 making unresolved pattern failures opt-in #417

2.0.1

• Add support for make_latest property #304 via @​samueljseay
• Fail run if files setting contains invalid patterns #384 via @​rpdelaney
• Add support for proxy env variables (don't use node-fetch) #386 via @​timor-raiman
• Suppress confusing warning when input_files is empty #389 via @​Drowze

2.0.0

• 2.0.0!? this release corrects a disjunction between git tag versions used in the marketplace and versions list this file. Previous versions should have really been 1.*. Going forward this should be better aligned.
• Upgrade action.yml declaration to node20 to address deprecations

0.1.15

• Upgrade to action.yml declaration to node16 to address deprecations
• Upgrade dependencies
• Add asset output as a JSON array containing information about the uploaded assets

0.1.14

• provides an new workflow input option generate_release_notes which when set to true will automatically generate release notes for you based on GitHub activity #179. Please see the GitHub docs for this feature for more information

0.1.13

• fix issue with multiple runs concatenating release bodies #145

0.1.12

• fix bug leading to empty strings subsituted for inputs users don't provide breaking api calls #144

0.1.11

• better error message on release create failed #143

... (truncated)

Commits

• 69320db update changelog
• 9771ccf update changelog rebuild dist
• 0a76e42 Fix: error handling (#449)
• 3989e4b document impl detail
• 72e945e update changelog
• 40bf9ec fmt and build
• 998623f fix: support space in file name (#446)
• 0979303 Fix failure (#447)
• 9b795e5 Update README.md (#432)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions