Skip to content

chore(deps): update pnpm/action-setup action to v6#1726

Closed
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/pnpm-action-setup-6.x
Closed

chore(deps): update pnpm/action-setup action to v6#1726
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/pnpm-action-setup-6.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 17, 2026

This PR contains the following updates:

Package Type Update Change
pnpm/action-setup action major v5v6

Release Notes

pnpm/action-setup (pnpm/action-setup)

v6

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


Note

Low Risk
Low risk: the only change is upgrading the pnpm/action-setup GitHub Action used in example CI workflows, which may affect dependency installation behavior but does not touch product code.

Overview
Updates the example GitHub Actions workflows (example-basic-pnpm and example-start-and-pnpm-workspaces) to install pnpm via pnpm/action-setup@v6 instead of @v5, leaving the rest of the CI steps unchanged.

Reviewed by Cursor Bugbot for commit 5ff1e07. Bugbot is set up for automated code reviews on this repo. Configure here.

@cypress-app-bot
Copy link
Copy Markdown
Collaborator

See the guidelines for reviewing dependency updates for info on how to review dependency update PRs.

Copy link
Copy Markdown

@cursor cursor Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 5ff1e07. Configure here.

# See https://github.com/pnpm/action-setup
- name: Install pnpm
uses: pnpm/action-setup@v5
uses: pnpm/action-setup@v6
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Upgrading to action-setup v6 installs wrong pnpm version

High Severity

pnpm/action-setup@v6 has a known critical bug (upstream issues #225, #226, #227, #228) where it ignores the version: 10 parameter and installs pnpm v11 beta instead. This causes the bootstrap v11 binary to shadow the self-updated v10 binary due to a PATH priority issue. The v11 bootstrap also modifies pnpm-lock.yaml, leading to ERR_PNPM_BROKEN_LOCKFILE errors and CI failures when combined with actions/setup-node caching and --frozen-lockfile.

Additional Locations (2)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 5ff1e07. Configure here.

@MikeMcC399
Copy link
Copy Markdown
Collaborator

Rejecting this PR, since the action version v6 is tied to the pnpm@11 release, which is currently in RC status.

https://github.com/pnpm/action-setup/releases currently shows v5 as latest

This should be revisited when pnpm@11 is officially released.

@MikeMcC399 MikeMcC399 closed this Apr 17, 2026
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Apr 17, 2026

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 6.x releases. But if you manually upgrade to 6.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@renovate renovate Bot deleted the renovate/pnpm-action-setup-6.x branch April 17, 2026 05:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants