chore(deps): update pnpm/action-setup action to v6#1726
Conversation
|
See the guidelines for reviewing dependency updates for info on how to review dependency update PRs. |
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 5ff1e07. Configure here.
| # See https://github.com/pnpm/action-setup | ||
| - name: Install pnpm | ||
| uses: pnpm/action-setup@v5 | ||
| uses: pnpm/action-setup@v6 |
There was a problem hiding this comment.
Upgrading to action-setup v6 installs wrong pnpm version
High Severity
pnpm/action-setup@v6 has a known critical bug (upstream issues #225, #226, #227, #228) where it ignores the version: 10 parameter and installs pnpm v11 beta instead. This causes the bootstrap v11 binary to shadow the self-updated v10 binary due to a PATH priority issue. The v11 bootstrap also modifies pnpm-lock.yaml, leading to ERR_PNPM_BROKEN_LOCKFILE errors and CI failures when combined with actions/setup-node caching and --frozen-lockfile.
Additional Locations (2)
Reviewed by Cursor Bugbot for commit 5ff1e07. Configure here.
|
Rejecting this PR, since the action version v6 is tied to the pnpm@11 release, which is currently in RC status. https://github.com/pnpm/action-setup/releases currently shows v5 as This should be revisited when pnpm@11 is officially released. |
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |


This PR contains the following updates:
v5→v6Release Notes
pnpm/action-setup (pnpm/action-setup)
v6Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.
Note
Low Risk
Low risk: the only change is upgrading the
pnpm/action-setupGitHub Action used in example CI workflows, which may affect dependency installation behavior but does not touch product code.Overview
Updates the example GitHub Actions workflows (
example-basic-pnpmandexample-start-and-pnpm-workspaces) to install pnpm viapnpm/action-setup@v6instead of@v5, leaving the rest of the CI steps unchanged.Reviewed by Cursor Bugbot for commit 5ff1e07. Bugbot is set up for automated code reviews on this repo. Configure here.