From d0d57455c2e9734b9373b160ac6c5efbb7f0673e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 19 May 2026 19:12:01 +0000 Subject: [PATCH] chore(deps): bump the github-actions-third-party group with 2 updates Bumps the github-actions-third-party group with 2 updates: [pnpm/action-setup](https://github.com/pnpm/action-setup) and [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action). Updates `pnpm/action-setup` from 5.0.0 to 6.0.8 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/fc06bc1257f339d1d5d8b3a19a8cae5388b55320...0e279bb959325dab635dd2c09392533439d90093) Updates `SonarSource/sonarqube-scan-action` from 8.0.0 to 8.1.0 - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/59db25f34e16620e48ab4bb9e4a5dce155cb5432...7006c4492b2e0ee0f816d36501671557c97f5995) --- updated-dependencies: - dependency-name: pnpm/action-setup dependency-version: 6.0.8 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-third-party - dependency-name: SonarSource/sonarqube-scan-action dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-third-party ... Signed-off-by: dependabot[bot] --- .github/workflows/publish-package.yml | 2 +- .github/workflows/tests.yml | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/publish-package.yml b/.github/workflows/publish-package.yml index 837c35a2862..22a2c998388 100644 --- a/.github/workflows/publish-package.yml +++ b/.github/workflows/publish-package.yml @@ -97,7 +97,7 @@ jobs: with: ref: ${{ matrix.ref || github.ref }} - - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 + - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8 - name: Check if there are new commits since last publish (nightly) or if it's a release id: publishable diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 6b880215975..2a3fece265a 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -140,7 +140,7 @@ jobs: working-directory: packages/codemod - run: pnpm exec c8 pnpm test working-directory: packages/codemod - - uses: SonarSource/sonarqube-scan-action@59db25f34e16620e48ab4bb9e4a5dce155cb5432 # v8.0.0 + - uses: SonarSource/sonarqube-scan-action@7006c4492b2e0ee0f816d36501671557c97f5995 # v8.1.0 if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository with: projectBaseDir: packages/codemod @@ -160,7 +160,7 @@ jobs: working-directory: packages/legacy-naming-strategies - run: pnpm exec c8 pnpm test working-directory: packages/legacy-naming-strategies - - uses: SonarSource/sonarqube-scan-action@59db25f34e16620e48ab4bb9e4a5dce155cb5432 # v8.0.0 + - uses: SonarSource/sonarqube-scan-action@7006c4492b2e0ee0f816d36501671557c97f5995 # v8.1.0 if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository with: projectBaseDir: packages/legacy-naming-strategies @@ -180,7 +180,7 @@ jobs: pattern: coverage-* path: coverage/ - - uses: SonarSource/sonarqube-scan-action@59db25f34e16620e48ab4bb9e4a5dce155cb5432 # v8.0.0 + - uses: SonarSource/sonarqube-scan-action@7006c4492b2e0ee0f816d36501671557c97f5995 # v8.1.0 if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository env: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}