Skip to content

chore(deps): update bfra-me/.github to v4#794

Open
bfra-me[bot] wants to merge 1 commit into
mainfrom
renovate/bfra-me-.github-4.x
Open

chore(deps): update bfra-me/.github to v4#794
bfra-me[bot] wants to merge 1 commit into
mainfrom
renovate/bfra-me-.github-4.x

Conversation

@bfra-me
Copy link
Copy Markdown
Contributor

@bfra-me bfra-me Bot commented Apr 22, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change OpenSSF
bfra-me/.github action major v1v4.16.13 OpenSSF Scorecard

Release Notes

bfra-me/.github (bfra-me/.github)

v4.16.13

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.69.1 to 9.70.0 (#​2129)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.72.0 to 9.73.0 (#​2134)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.42.6 to v0.42.7 (#​2124)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.71.0 to 9.72.0 (#​2133)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.68.0 to 9.69.1 (#​2128)

  • ⚙️ Update GitHub Actions workflow dependency actions/labeler from v6.0.1 to v6.1.0 (#​2132)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.70.0 to 9.71.0 (#​2131)

  • 📦 Update npm dependency eslint from 10.2.1 to 10.3.0 (#​2130)

  • 📦 Update npm dependency pnpm (#​2127)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.67.1 to 9.68.0 (#​2126)

v4.16.12

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.67.0 to 9.67.1 (#​2119)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.42.5 to v0.42.6 (#​2122)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.66.0 to 9.67.0 (#​2117)

  • ⚙️ Update GitHub Actions workflow dependency pnpm/action-setup from v6.0.3 to v6.0.4 (#​2115)

  • ⚙️ Update GitHub Actions workflow dependency pnpm/action-setup from v6.0.4 to v6.0.5 (#​2121)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.42.4 to v0.42.5 (#​2120)

  • ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.35.2 to 4.35.3 (#​2118)

v4.16.11

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.42.2 to v0.42.3 (#​2109)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.42.3 to v0.42.4 (#​2111)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.65.0 to 9.66.0 (#​2113)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.64.0 to 9.65.0 (#​2112)

v4.16.10

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.56.0 to 9.56.1 (#​2099)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.56.1 to 9.57.0 (#​2100)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.55.1 to 9.56.0 (#​2096)

  • 📦 Update npm dependency pnpm (#​2097)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.62.0 to 9.63.0 (#​2106)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.63.0 to 9.64.0 (#​2107)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.57.0 to 9.58.0 (#​2101)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.58.0 to 9.59.0 (#​2102)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.59.0 to 9.60.0 (#​2103)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.60.0 to 9.61.0 (#​2104)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.61.0 to 9.62.0 (#​2105)

v4.16.9

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.54.0 to 9.55.0 (#​2083)

  • 📦 Update npm dependency pnpm from 10.33.0 to 10.33.1 (#​2088)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.55.0 to 9.55.1 (#​2087)

  • 📦 Update npm dependency @actions/core from 3.0.0 to 3.0.1 (#​2085)

  • 📦 Group update for npm dependencies: @vitest/coverage-v8, vitest (#​2084)

  • 📦 Update npm dependency @actions/github from 9.1.0 to 9.1.1 (#​2086)

  • 📦 Update npm dependency vite from 8.0.8 to 8.0.9 (#​2081)

  • ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.41.4 to v0.42.0 (#​2089)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.41.3 to v0.41.4 (#​2079)

  • 📦 Update npm dependency pnpm from 10.33.1 to 10.33.2 (#​2094)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.53.0 to 9.54.0 (#​2082)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.42.0 to v0.42.1 (#​2090)

  • 📦 Update npm dependency vite from 8.0.9 to 8.0.10 (#​2091)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.42.1 to v0.42.2 (#​2093)

v4.16.8

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.49.0 to 9.49.1 (f24bb55)

  • ⚙️ Update GitHub Actions workflow dependency pnpm/action-setup from v6.0.1 to v6.0.3 (d25dd6c)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.49.1 to 9.50.0 (e61a913)

  • 📦 Update npm dependency eslint from 10.2.0 to 10.2.1 (3a28a98)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.50.0 to 9.51.0 (7a3cd86)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.41.2 to v0.41.3 (4805a9e)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.51.0 to 9.52.0 (e41f4ca)

  • 📦 Update npm dependency @changesets/cli from 2.30.0 to 2.31.0 (caa5d39)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.52.0 to 9.53.0 (#​2077)

  • 📦 Update npm dependency @changesets/config from 3.1.3 to 3.1.4 (dd6964d)

  • ⚙️ Update GitHub Actions workflow dependency actions/setup-node from v6.3.0 to v6.4.0 (acef69b)

  • 📦 Update npm dependency typescript from 6.0.2 to 6.0.3 (ad7f9ef)

v4.16.7

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency pnpm/action-setup from v6.0.0 to v6.0.1 (#​2055)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.40.1 to v0.40.2 (#​2053)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.41.1 to v0.41.2 (#​2061)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.43.0 to 9.44.0 (#​2052)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.42.0 to 9.43.0 (#​2049)

  • 📦 Group update for dependencies dependencies: Node.js, node (#​2051)

  • 📦 Update npm dependency prettier from 3.8.2 to 3.8.3 (#​2056)

  • ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.40.2 to v0.41.0 (#​2058)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.48.0 to 9.49.0 (#​2063)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.46.0 to 9.48.0 (#​2062)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.45.0 to 9.46.0 (#​2057)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.44.0 to 9.45.0 (#​2054)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.41.0 to v0.41.1 (#​2059)

v4.16.6

Compare Source

Patch Changes
  • 📦 Group update for npm dependencies: @bfra.me/eslint-config, @bfra.me/prettier-config, @bfra.me/tsconfig (#​2042)

    ⚠️ Breaking Changes: This update includes breaking changes that may require code modifications.

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.40.0 to 9.41.0 (#​2044)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.37.0 to 9.38.0 (#​2037)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.39.0 to 9.40.0 (#​2041)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.40.0 to v0.40.1 (#​2047)

  • ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.39.1 to v0.40.0 (#​2034)

  • 📦 Update npm dependency @types/node from 24.12.0 to 24.12.2 (#​2043)

  • ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.35.1 to 4.35.2 (#​2045)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.41.0 to 9.42.0 (#​2046)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.38.0 to 9.39.0 (#​2038)

v4.16.5

Compare Source

Patch Changes
  • 📦 Update npm dependency @bfra.me/eslint-config from 0.50.2 to 0.50.3 (#​2015)

  • 📦 Update npm dependency prettier from 3.8.1 to 3.8.2 (#​2022)

  • 📦 Update npm dependency @actions/github from 9.0.0 to 9.1.0 (#​2030)

  • ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.38.0 to v0.39.0 (#​2023)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.36.0 to 9.37.0 (#​2031)

  • 📦 Update npm dependency vite from 8.0.5 to 8.0.8 (#​2029)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.34.0 to 9.35.0 (#​2021)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.35.0 to 9.36.0 (#​2027)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.39.0 to v0.39.1 (#​2026)

v4.16.4

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency actions/create-github-app-token from v3.1.0 to v3.1.1 (#​2013)

v4.16.3

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency peter-evans/create-pull-request from v8.1.0 to v8.1.1 (#​2007)

  • ⚙️ Update GitHub Actions workflow dependency actions/create-github-app-token from v3.0.0 to v3.1.0 (#​2009)

  • ⚠️ Update GitHub Actions workflow dependency pnpm/action-setup to v6 (v6.0.0) (#​2010)

  • ⚙️ Update GitHub Actions workflow dependency actions/upload-artifact from v7.0.0 to v7.0.1 (#​2008)

  • 📦 Group update for npm dependencies: @vitest/coverage-v8, vitest (#​2005)

  • ⚠️ Update npm dependency typescript to v6 (6.0.2) (#​2002)

    ⚠️ Breaking Changes: This update includes breaking changes that may require code modifications.

v4.16.2

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.32.0 to 9.33.0 (#​1998)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.33.0 to 9.34.0 (#​2000)

v4.16.1

Compare Source

Patch Changes
  • Fix create-changeset job always skipped for external callers of the renovate-changeset reusable workflow (#​1991)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.29.3 to 9.30.0 (#​1993)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.29.2 to 9.29.3 (#​1988)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.30.0 to 9.31.0 (#​1994)

  • ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.37.1 to v0.38.0 (#​1996)

  • 📦 Update npm dependency eslint from 10.1.0 to 10.2.0 (#​1987)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.37.0 to v0.37.1 (#​1989)

  • ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.36.5 to v0.37.0 (#​1985)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.31.0 to 9.32.0 (#​1995)

v4.16.0

Compare Source

Minor Changes
  • Add internal Renovate config preset to roll up org config. (#​1983)
Patch Changes
  • 📦 Update npm dependency pnpm (#​1980)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.36.4 to v0.36.5 (#​1979)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.29.0 to 9.29.1 (#​1981)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.29.1 to 9.29.2 (#​1982)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.36.3 to v0.36.4 (#​1977)

v4.15.0

Compare Source

Minor Changes
  • Expose global-config input in reusable Renovate workflow (#​1973)

    Add a global-config input to the workflow_call and workflow_dispatch triggers in .github/workflows/renovate.yaml and pass it through to bfra-me/renovate-action. This allows consuming repositories to configure global-only Renovate options such as gitNoVerify.

Patch Changes
  • Fix AGENTS.md file count and workflow documentation inaccuracies (#​1968)

  • Replace stale HACK comment in scripts/release.ts with proper documentation explaining why monorepo root packages log the <name>@&#8203;<version> tag format for the Changesets action. Update AGENTS.md accordingly. (#​1974)

  • 📦 Update npm dependency @bfra.me/eslint-config from 0.50.1 to 0.50.2 (#​1970)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.36.2 to v0.36.3 (#​1972)

v4.14.7

Compare Source

Patch Changes
  • Remove job-level permissions from renovate-changeset reusable workflow to fix startup_failure when callers set restrictive workflow-level permissions. (#​1962)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.36.1 to v0.36.2 (#​1964)

v4.14.6

Compare Source

Patch Changes
  • Update AGENTS.md to reflect current file structure (#​1918)

    • Correct renovate-changesets src file count from 96 to 125
    • Add missing files to renovate-changesets/AGENTS.md structure listing:
      action-config.ts, action-outputs.ts, changeset-info-formatter.ts,
      changeset-writer.ts, run-generation-helpers.ts, run-generation-outputs.ts,
      pr-comment-creator.ts, pr-description-updater.ts, summary-generator-types.ts,
      and utils/ directory
    • Add missing test files to listing: setup.ts, extract-dependencies-from-title.test.ts,
      phantom-dependency-regression.test.ts
  • Broaden bot actor filter in renovate-changeset workflow to accept any GitHub App bot, not just bfra-me[bot] and renovate[bot]. (#​1956)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.28.0 to 9.29.0 (#​1954)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.27.0 to 9.28.0 (#​1949)

  • 📦 Update npm dependency minimatch from 10.2.4 to 10.2.5 (#​1953)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.36.0 to v0.36.1 (#​1951)

v4.14.5

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.25.1 to 9.26.0 (#​1939)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.24.0 to 9.25.0 (#​1935)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.25.0 to 9.25.1 (#​1937)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.26.0 to 9.27.0 (#​1944)

  • ⚙️ Update GitHub Actions workflow dependency fossas/fossa-action from v1.8.0 to v1.9.0 (#​1943)

  • 📦 Update npm dependency pnpm (#​1936)

  • ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.35.0 to v0.36.0 (#​1941)

  • 📋 Update dependency bfra-me/renovate-config from 5.2.0 to 5.2.1 (#​1946)

  • ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.34.1 to v0.35.0 (#​1932)

v4.14.4

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.23.0 to 9.24.0 (#​1924)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.34.0 to v0.34.1 (#​1928)

  • 📦 Group update for npm dependencies: @vitest/coverage-v8, vitest (#​1929)

  • ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.32.3 to v0.33.0 (#​1926)

  • ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.33.0 to v0.34.0 (#​1927)

v4.14.3

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.14.0 to 9.14.1 (#​1901)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.32.1 to v0.32.2 (#​1916)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.18.0 to 9.19.0 (#​1911)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.19.0 to 9.20.0 (#​1912)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.16.0 to 9.17.0 (#​1908)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.14.1 to 9.15.0 (#​1904)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.17.0 to 9.18.0 (#​1909)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.20.0 to 9.21.0 (#​1917)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.15.0 to 9.16.0 (#​1906)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.22.0 to 9.23.0 (#​1920)

  • 📦 Update npm dependency pnpm from 10.32.1 to 10.33.0 (#​1915)

  • ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.34.1 to 4.35.0 (#​1910)

  • 📦 Group update for npm dependencies: @vitest/coverage-v8, vitest (#​1903)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.21.0 to 9.22.0 (#​1919)

  • ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.35.0 to 4.35.1 (#​1914)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.32.2 to v0.32.3 (#​1922)

v4.14.2

Compare Source

Patch Changes
  • Fix self-checkout in reusable workflows: use GITHUB_WORKFLOW_REF to resolve the correct ref instead of github.workflow_sha, which resolves to the caller's SHA during workflow_call. (#​1897)

v4.14.1

Compare Source

Patch Changes
  • Pass GitHub App token to self-checkout steps in reusable workflows for cross-repo access when called via workflow_call. (#​1893)

v4.14.0

Compare Source

Minor Changes
  • Replace hardcoded SHA pins for internal actions in reusable workflows with self-checkout at github.workflow_sha. Actions now always match the workflow version — no timing gap, no recursive release cycle, no separate "update internal action SHA pins" automation needed for action packages. (#​1889)

v4.13.9

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.12.0 to 9.13.0 (#​1878)

  • 📦 Group update for dependencies dependencies: Node.js, node (#​1882)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.13.0 to 9.14.0 (#​1880)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.32.0 to v0.32.1 (#​1883)

v4.13.8

Compare Source

Patch Changes
  • ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.31.2 to v0.32.0 (#​1872)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.10.1 to 9.11.0 (#​1874)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.11.0 to 9.12.0 (#​1875)

v4.13.7

Compare Source

Patch Changes
  • Force flatted to 3.4.2 to fix prototype pollution vulnerability (CVE-2026-33228) (#​1859)

    This addresses a HIGH severity security vulnerability in flatted <=3.4.1
    discovered via Dependabot alert #​39. The vulnerability allows prototype
    pollution via the parse() function in NodeJS.

    Since flatted is a transitive dependency of eslint via flat-cache and
    file-entry-cache, we add a pnpm override to ensure the patched version
    is used throughout the dependency tree.

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.10.0 to 9.10.1 (#​1868)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.31.1 to v0.31.2 (#​1863)

  • 📦 Update npm dependency eslint from 10.0.3 to 10.1.0 (#​1869)

  • 📦 Update npm dependency pnpm (#​1867)

v4.13.6

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.8.0 to 9.9.0 (#​1855)

  • ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.30.10 to v0.31.1 (#​1861)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.9.0 to 9.10.0 (#​1857)

v4.13.5

Compare Source

Patch Changes
  • 📦 Update GitHub Actions workflow dependencies: update-repository-settings, bfra-me/.github (#​1852)

v4.13.4

Compare Source

Patch Changes
  • Migrate deprecated contexts field to checks in branch protection (#​1836)

    The contexts field in branch protection settings is deprecated. This change
    migrates to the newer checks format using the context property.

    • Update .github/settings.yml to use checks format
    • Maintain all existing status check requirements
    • Fixes GitHub API deprecation warning

    refs: https://docs.github.com/en/rest/branches/branch-protection#update-branch-protection

  • ⚙️ Update GitHub Actions workflow dependency kentaro-m/auto-assign-action from v2.0.1 to v2.0.2 (#​1841)

  • 📦 Group update for npm dependencies: @vitest/coverage-v8, vitest (#​1762)

  • ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.34.0 to 4.34.1 (#​1845)

  • ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.33.0 to 4.34.0 (#​1842)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.6.1 to 9.7.0 (#​1838)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.6.0 to 9.6.1 (#​1834)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.7.0 to 9.8.0 (#​1840)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.5.0 to 9.6.0 (#​1832)

v4.13.3

Compare Source

Patch Changes
  • Skip changeset generation for auto-pin SHA update PRs to prevent recursive release cycles (#​1828)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.4.0 to 9.5.0 (#​1830)

  • 📋 Update github-actions dependency internal (#​1827)

v4.13.2

Compare Source

Patch Changes
  • 📋 Update github-actions dependency bfra-me/.github from 4.12.1 to 4.13.0 (#​1821)

  • ⚠️ Update GitHub Actions workflow dependency bfra-me/renovate-action to v9 (9.4.0) (#​1770)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.30.9 to v0.30.10 (#​1823)

v4.13.1

Compare Source

Patch Changes
  • 📦 Update GitHub Actions workflow dependencies: renovate-changesets, bfra-me/.github (#​1820)

v4.13.0

Compare Source

Minor Changes
  • 📋 Update github-actions dependency bfra-me/.github from 4.11.0 to 4.12.1 (#​1807)
Patch Changes
  • Auto-update internal action SHA pins during release (#​1815)

    • When renovate-changesets or update-repository-settings is released, automatically update the SHA pin and version comment in the corresponding workflow file
    • Eliminates the Renovate follow-up PR that previously updated the SHA pin, which generated an unnecessary patch changeset and extra release cycle
  • ⚠️ Update GitHub Actions workflow dependency pnpm/action-setup to v5 (5.0.0) (#​1816)

  • 📦 Update GitHub Actions workflow dependencies: renovate-changesets to v0.2.25 (#​1810)

v4.12.1

Compare Source

Patch Changes
  • 📦 Update GitHub Actions workflow dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1806)

v4.12.0

Compare Source

Minor Changes
  • 📋 Update github-actions dependency bfra-me/.github from 4.10.2 to 4.11.0 (#​1802)
Patch Changes
  • 📦 Update GitHub Actions workflow dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1801)

v4.11.0

Compare Source

Minor Changes
  • ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from 1e9e22259351e5266d65021b5b2a35a98da63d89 to 442fe99e017c4779b3d122ba42a297c39008b86b (#​1799)
Patch Changes
  • 📋 Update github-actions dependency bfra-me/.github from 4.10.1 to 4.10.2 (#​1796)

v4.10.2

Compare Source

Patch Changes
  • 🔒 Security update for GitHub Actions dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1794)

  • 🔒 Security update for github-actions dependency bfra-me/.github from 4.10.0 to 4.10.1 (#​1793)

v4.10.1

Compare Source

Patch Changes
  • 🔒 Security update for github-actions dependency bfra-me/.github from 4.9.0 to 4.10.0 (#​1788)

v4.10.0

Compare Source

Minor Changes
  • 🔒 Security update for GitHub Actions dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1784)
Patch Changes
  • 🔒 Security update for github-actions dependency bfra-me/.github from 4.8.1 to 4.9.0 (#​1785)

v4.9.0

Compare Source

Minor Changes
  • 📦 Update GitHub Actions workflow dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1780)
Patch Changes
  • 📋 Update dependencies dependency bfra-me/.github from 4.8.0 to 4.8.1 (#​1779)

v4.8.1

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.32.6 to 4.33.0 (#​1768)

  • 📦 Update npm dependency pnpm (#​1767)

  • ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from 0.30.6 to 0.30.8 (#​1757)

  • 📦 Update npm dependency lint-staged from 16.3.4 to 16.4.0 (#​1778)

  • 📦 Update npm dependency lint-staged from 16.3.3 to 16.3.4 (#​1777)

  • ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 8.87.7 to 8.87.8 (#​1766)

  • 📦 Update 6 GitHub Actions workflow dependencies (#​1769)

  • 📦 Update 10 GitHub Actions workflow dependencies (#​1764)

v4.8.0

Compare Source

Minor Changes
  • ⚠️ Update GitHub Actions workflow dependency action (#​1754)
Patch Changes
  • 📦 Update npm dependency @types/node from 24.10.14 to 24.12.0 (#​1760)

v4.7.0

Compare Source

Minor Changes
  • ⚠️ Update GitHub Actions workflow dependency actions/create-github-app-token from 2.2.2 to 3.0.0 (#​1751)
Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency bfra-me/.github from 0.1.1 to 0.1.2 (#​1745)

  • ⚙️ Update GitHub Actions workflow dependency dorny/paths-filter from 4.0.0 to 4.0.1 (#​1752)

  • 📦 Group update for npm dependencies: pnpm, Age (#​1750)

  • Add commitMessageTopic to Renovate config for action path visibility in PRs and changesets (#​1748)

    Configure commitMessageTopic for renovate-changesets and update-repository-settings actions
    so that Renovate PRs and changesets clearly identify the specific action being updated instead of
    only showing the repository name (bfra-me/.github).

    Before: chore(deps): update bfra-me/.github to v0.1.2
    After: chore(deps): update action update-repository-settings to v0.1.2

    Also update the renovate-changesets action parser to correctly extract the action name from PR
    titles that include the update action <name> phrase (produced by commitMessageTopic).

v4.6.0

Compare Source

Minor Changes
  • ⚠️ Update github-actions dependencies: dorny/paths-filter (#​1731)
Patch Changes
  • Add conditional to skip checkout on non-push events. (#​1744)

  • ⚙️ Update github-actions dependencies: bfra-me/.github (#​1742)

v4.5.5

Compare Source

Patch Changes
  • 📦 Update github-actions dependencies: actions/create-github-app-token, minimatch, undici and 8 more (#​1740)

  • 📋 Update unknown dependencies: bfra-me/.github (#​1736)

v4.5.4

Compare Source

Patch Changes
  • Fix renovate-changesets parsing for GitHub Actions updates so summaries use the correct manager, (#​1732)
    dependency names, and version details for action updates like dorny/paths-filter.

v4.5.3

Compare Source

Patch Changes
  • Fix Renovate-generated changeset dependency summaries for single-dependency and digest update PRs. (#​1723)

  • Fix Renovate config for internal actions: use correct depName (bfra-me/.github), explicitly disable digest update type to stop recursive self-referencing PRs, and change version comments to bare semver so Renovate can parse currentValue for release-based version tracking. (#​1727)

  • Fix version extraction for internal actions by using matchDepNames instead of matchPackageNames in renovate.json5. For GitHub Actions with subdirectory paths, depName includes the full path (e.g., bfra-me/.github/.github/actions/renovate-changesets), while matchPackageNames only matches the normalized owner/repo format. (#​1721)

  • 📋 Update github-actions dependencies: bfra-me/.github (#​1728)

  • 📋 Update github-actions dependencies: bfra-me/.github (#​1726)

  • 📦 Update bfra-me/.github action digests (renovate-changesets, update-repository-settings) (#​1724)

v4.5.2

Compare Source

Patch Changes
  • ⚙️ Update GitHub Actions workflow dependency pnpm/action-setup from v4.3.0 to v4.4.0 (#​1715)

  • 📋 Update unknown dependencies: github-actions-dependencies (#​1710)

  • 📦 Update dependency bfra-me/renovate-action to 8.87.6 (#​1714)

  • Avoid recursive self-action update PRs. (#​1717)

v4.5.1

Compare Source

Patch Changes
  • Use local action reference instead of pinned remote action in renovate-changeset workflow (#​1708)

    This prevents Renovate from creating PRs on every push to main in the .github repo.
    The workflow now uses ./.github/actions/renovate-changesets (local path) instead of
    bfra-me/.github/.github/actions/renovate-changesets@<sha>.

  • Migrate deprecated contexts field to checks in common-settings.yaml branch protection settings (#​1698)

  • Update bfra-me/.github action digest to 49859f7 (#​1707)

  • Update bfra-me/.github action digest to c33c84c (#​1703)

  • Update bfra-me/.github action digest to b1670c0 (#​1706)

  • Update dependency lint-staged to 16.3.3 (#​1693)

  • Update bfra-me/.github action digest to 61be6f0 (#​1704)

  • Update bfra-me/.github action digest to d6bbf90 (#​1701)

  • Update bfra-me/.github action digest to 16aab9f (#​1709)

v4.5.0

Compare Source

Minor Changes
  • Add update-repository-settings action replacing elstudio/actions-settings with direct Octokit API calls. Fixes TypeError: this.topics.split is not a function when repository.topics is a YAML array. (#​1675)
Patch Changes
  • Fix 422 error in update-repository-settings action when applying branch protection by sanitizing GET response shape before PUT. (#​1679)

  • Updated GitHub Actions dependencies. (#​1687)

  • Updated dependency packageManager to pnpm@10.32.0. (#​1686)

  • Pin changesets/action to SHA e87c8ed # v1.7.0 in auto-release.yaml (#​1680)

v4.4.0

Compare Source

Minor Changes
  • Add Fro Bot AI agent workflows for PR review, scheduled org oversight, and daily autohealing: (#​1662)
    • add fro-bot.yaml: core reusable agent workflow responding to issue/PR
      comments (@​fro-bot mentions), PR synchronize events, scheduled daily
      org oversight, workflow_dispatch, and workflow_call; guards against
      forks, bots, and non-member comment authors
    • add fro-bot-autoheal.yaml: daily (03:30 UTC) repo self-healing —
      fixes failing PR CI, patches security advisories, audits SHA pinning
      and dist/ freshness, checks code quality, and posts a structured
      summary issue
    • add fro-bot-autoheal-org.yaml: weekday (05:00 UTC, Mon–Fri) org-wide
      sweep — CI health, Dependabot alerts, tooling-version drift, DX gaps,
      org-pattern adherence, and stale work across all bfra-me repos;
      supports targeting a single repo via workflow_dispatch input
Patch Changes
  • Updated dependency eslint to 9.39.4. (#​1657)

  • Updated dependency eslint to 10.0.3. (#​1668)

  • Updated depende

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone America/Phoenix)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@bfra-me bfra-me Bot added action dependencies Changes to dependencies or package management github-actions major Major version bump renovate Universal dependency update tool <https://mend.io/renovate> labels Apr 22, 2026
@bfra-me bfra-me Bot force-pushed the renovate/bfra-me-.github-4.x branch 8 times, most recently from aaed55b to cb435c6 Compare April 30, 2026 15:10
@bfra-me bfra-me Bot force-pushed the renovate/bfra-me-.github-4.x branch 7 times, most recently from 78bb677 to fefa8dd Compare May 8, 2026 21:09
@bfra-me bfra-me Bot force-pushed the renovate/bfra-me-.github-4.x branch from fefa8dd to 8a40297 Compare May 9, 2026 13:27
@bfra-me bfra-me Bot force-pushed the renovate/bfra-me-.github-4.x branch from 8a40297 to f5d1a07 Compare May 10, 2026 15:00
@bfra-me
Copy link
Copy Markdown
Contributor Author

bfra-me Bot commented May 10, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action dependencies Changes to dependencies or package management github-actions major Major version bump renovate Universal dependency update tool <https://mend.io/renovate>

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants