angular · josephperrott · Aug 27, 2025
diff --git a/.github/local-actions/branch-manager/main.js b/.github/local-actions/branch-manager/main.js
diff --git a/.github/local-actions/labels-sync/main.js b/.github/local-actions/labels-sync/main.js
diff --git a/.github/local-actions/lock-closed/main.js b/.github/local-actions/lock-closed/main.js
diff --git a/.github/ng-renovate/package.json b/.github/ng-renovate/package.json
@@ -2,7 +2,7 @@
   "name": "ng-renovate",
   "type": "commonjs",
   "dependencies": {
-    "renovate": "41.84.0"
+    "renovate": "41.87.3"
   },
   "pnpm": {
     "onlyBuiltDependencies": [

diff --git a/.github/ng-renovate/pnpm-lock.yaml b/.github/ng-renovate/pnpm-lock.yaml
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -37,9 +37,7 @@ jobs:
       # - name: Confirm code builds with typescript as expected
       #   run: pnpm tsc -p tsconfig.json
       - name: Check Package Licenses
-        # We use this action pinned at main because we need to have an actual version for the config to load.
-        # Since using the local version would end up nearly using `main` anyway, this is essentially equivalent.
-        uses: angular/dev-infra/github-actions/linting/licenses@main
+        uses: ./github-actions/linting/licenses
         with:
           allow-dependencies-licenses: 'pkg:npm/renovate, pkg:npm/@renovatebot/detect-tools'
 

diff --git a/apps/functions/package.json b/apps/functions/package.json
@@ -7,7 +7,7 @@
   "type": "module",
   "private": true,
   "dependencies": {
-    "@octokit/auth-app": "8.0.2",
+    "@octokit/auth-app": "8.1.0",
     "@octokit/request-error": "7.0.0",
     "@octokit/rest": "22.0.0",
     "@octokit/webhooks-types": "7.6.1",

diff --git a/github-actions/branch-manager/main.js b/github-actions/branch-manager/main.js
diff --git a/github-actions/feature-request/main.js b/github-actions/feature-request/main.js
diff --git a/github-actions/linting/licenses/action.yml b/github-actions/linting/licenses/action.yml
@@ -14,8 +14,8 @@ runs:
       uses: actions/dependency-review-action@bc41886e18ea39df68b1b1245f4184881938e050 # v4.7.2
       env:
         # The action ref here allows us to import the config file from the same sha we rely on in the downstream usage
-        ACTION_REF: ${{ github.action_ref }}
-        ACTION_REPO: ${{ github.action_repository }}
+        ACTION_REF: ${{ github.action_ref || 'main' }}
+        ACTION_REPO: ${{ github.action_repository || 'angular/dev-infra' }}
       with:
         config-file: '${{ env.ACTION_REPO }}/github-actions/linting/licenses/dependency-review-config.yml@${{ env.ACTION_REF }}'
         allow-dependencies-licenses: '${{inputs.allow-dependencies-licenses}}'

diff --git a/github-actions/org-file-sync/main.js b/github-actions/org-file-sync/main.js
diff --git a/github-actions/package.json b/github-actions/package.json
@@ -3,7 +3,7 @@
   "dependencies": {
     "@actions/core": "1.11.1",
     "@actions/github": "6.0.1",
-    "@octokit/auth-app": "8.0.2",
+    "@octokit/auth-app": "8.1.0",
     "@octokit/rest": "22.0.0",
     "@types/jasmine": "5.1.9",
     "@types/node": "24.3.0"

diff --git a/github-actions/post-approval-changes/main.js b/github-actions/post-approval-changes/main.js
diff --git a/github-actions/pull-request-labeling/main.js b/github-actions/pull-request-labeling/main.js
diff --git a/github-actions/unified-status-check/main.js b/github-actions/unified-status-check/main.js
diff --git a/ng-dev/package.json b/ng-dev/package.json
@@ -20,7 +20,7 @@
     "@google/genai": "1.15.0",
     "@inquirer/prompts": "7.8.4",
     "@inquirer/type": "3.0.8",
-    "@octokit/auth-app": "8.0.2",
+    "@octokit/auth-app": "8.1.0",
     "@octokit/core": "7.0.3",
     "@octokit/graphql-schema": "15.26.0",
     "@octokit/graphql": "9.0.1",

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml