Skip to content

build: update all non-major dependencies#3613

Open
angular-robot wants to merge 1 commit intoangular:mainfrom
angular-robot:ng-renovate/all-non-major-dependencies
Open

build: update all non-major dependencies#3613
angular-robot wants to merge 1 commit intoangular:mainfrom
angular-robot:ng-renovate/all-non-major-dependencies

Conversation

@angular-robot
Copy link
Copy Markdown
Contributor

@angular-robot angular-robot commented Apr 16, 2026

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@actions/github (source) 9.0.09.1.0 age adoption passing confidence
renovate (source) 43.120.143.122.0 age adoption passing confidence

  • If you want to rebase/retry this PR, check this box

Release Notes

actions/toolkit (@​actions/github)

v9.1.0

  • Append actions_orchestration_id to user-agent when the ACTIONS_ORCHESTRATION_ID environment variable is set #​2364
renovatebot/renovate (renovate)

v43.122.0

Compare Source

Features
Documentation
Miscellaneous Chores
  • deps: update github/codeql-action action to v4.35.2 (main) (#​42650) (40100d0)

v43.121.0

Compare Source

Features
Bug Fixes
  • git: don't pass extraCloneOpts to ls-remote when local clone exists (#​42491) (70fa962)
  • gitlab: loosen re-approve constraints during updatePr (#​42528) (7b4f75b)
Documentation
Miscellaneous Chores
  • deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.24.1 (main) (#​42642) (61947e2)
Code Refactoring
Build System

v43.120.2

Compare Source

Bug Fixes
  • vulnerability: remove matchFileNames restriction from GitHub vulnerability alerts (#​42636) (593a2b1)

@angular-robot angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Apr 16, 2026
Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the @actions/github dependency to version 9.1.0 and the renovate dependency to version 43.120.2 across several configuration files. A critical issue was identified in the root pnpm-lock.yaml file, where only the importers section was updated for @actions/github, leaving the packages and snapshots sections out of sync, which will likely lead to installation failures.

Comment thread pnpm-lock.yaml
Comment on lines 128 to +130
'@actions/github':
specifier: 9.0.0
version: 9.0.0
specifier: 9.1.0
version: 9.1.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The root pnpm-lock.yaml file appears to be out of sync. While the importers section has been updated to point to @actions/github: 9.1.0, the corresponding updates to the packages and snapshots sections (which should contain the resolution and dependency details for version 9.1.0) are missing from this file's diff. In contrast, the .github/ng-renovate/pnpm-lock.yaml file correctly includes hunks for all three sections. This inconsistency will likely cause pnpm install to fail due to missing package definitions for version 9.1.0.

@angular-robot angular-robot force-pushed the ng-renovate/all-non-major-dependencies branch 2 times, most recently from dd67fcf to 5be327f Compare April 16, 2026 10:32
See associated pull request for more information.
@angular-robot angular-robot force-pushed the ng-renovate/all-non-major-dependencies branch from 5be327f to a7d33ce Compare April 16, 2026 13:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant