ci(deps): update bfra-me/.github to v4.16.8

[bfra-me]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
bfra-me/.github	action	minor	v4.4.0 → v4.16.8

---

Release Notes

bfra-me/.github (bfra-me/.github)

v4.16.8

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.49.0 to 9.49.1 (f24bb55)

• ⚙️ Update GitHub Actions workflow dependency pnpm/action-setup from v6.0.1 to v6.0.3 (d25dd6c)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.49.1 to 9.50.0 (e61a913)

• 📦 Update npm dependency eslint from 10.2.0 to 10.2.1 (3a28a98)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.50.0 to 9.51.0 (7a3cd86)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.41.2 to v0.41.3 (4805a9e)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.51.0 to 9.52.0 (e41f4ca)

• 📦 Update npm dependency @changesets/cli from 2.30.0 to 2.31.0 (caa5d39)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.52.0 to 9.53.0 (#​2077)

• 📦 Update npm dependency @changesets/config from 3.1.3 to 3.1.4 (dd6964d)

• ⚙️ Update GitHub Actions workflow dependency actions/setup-node from v6.3.0 to v6.4.0 (acef69b)

• 📦 Update npm dependency typescript from 6.0.2 to 6.0.3 (ad7f9ef)

v4.16.7

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency pnpm/action-setup from v6.0.0 to v6.0.1 (#​2055)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.40.1 to v0.40.2 (#​2053)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.41.1 to v0.41.2 (#​2061)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.43.0 to 9.44.0 (#​2052)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.42.0 to 9.43.0 (#​2049)

• 📦 Group update for dependencies dependencies: Node.js, node (#​2051)

• 📦 Update npm dependency prettier from 3.8.2 to 3.8.3 (#​2056)

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.40.2 to v0.41.0 (#​2058)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.48.0 to 9.49.0 (#​2063)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.46.0 to 9.48.0 (#​2062)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.45.0 to 9.46.0 (#​2057)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.44.0 to 9.45.0 (#​2054)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.41.0 to v0.41.1 (#​2059)

v4.16.6

Compare Source

Patch Changes

• 📦 Group update for npm dependencies: @bfra.me/eslint-config, @bfra.me/prettier-config, @bfra.me/tsconfig (#​2042)

  ⚠️ Breaking Changes: This update includes breaking changes that may require code modifications.

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.40.0 to 9.41.0 (#​2044)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.37.0 to 9.38.0 (#​2037)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.39.0 to 9.40.0 (#​2041)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.40.0 to v0.40.1 (#​2047)

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.39.1 to v0.40.0 (#​2034)

• 📦 Update npm dependency @types/node from 24.12.0 to 24.12.2 (#​2043)

• ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.35.1 to 4.35.2 (#​2045)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.41.0 to 9.42.0 (#​2046)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.38.0 to 9.39.0 (#​2038)

v4.16.5

Compare Source

Patch Changes

• 📦 Update npm dependency @bfra.me/eslint-config from 0.50.2 to 0.50.3 (#​2015)

• 📦 Update npm dependency prettier from 3.8.1 to 3.8.2 (#​2022)

• 📦 Update npm dependency @actions/github from 9.0.0 to 9.1.0 (#​2030)

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.38.0 to v0.39.0 (#​2023)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.36.0 to 9.37.0 (#​2031)

• 📦 Update npm dependency vite from 8.0.5 to 8.0.8 (#​2029)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.34.0 to 9.35.0 (#​2021)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.35.0 to 9.36.0 (#​2027)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.39.0 to v0.39.1 (#​2026)

v4.16.4

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency actions/create-github-app-token from v3.1.0 to v3.1.1 (#​2013)

v4.16.3

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency peter-evans/create-pull-request from v8.1.0 to v8.1.1 (#​2007)

• ⚙️ Update GitHub Actions workflow dependency actions/create-github-app-token from v3.0.0 to v3.1.0 (#​2009)

• ⚠️ Update GitHub Actions workflow dependency pnpm/action-setup to v6 (v6.0.0) (#​2010)

• ⚙️ Update GitHub Actions workflow dependency actions/upload-artifact from v7.0.0 to v7.0.1 (#​2008)

• 📦 Group update for npm dependencies: @vitest/coverage-v8, vitest (#​2005)

• ⚠️ Update npm dependency typescript to v6 (6.0.2) (#​2002)

  ⚠️ Breaking Changes: This update includes breaking changes that may require code modifications.

v4.16.2

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.32.0 to 9.33.0 (#​1998)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.33.0 to 9.34.0 (#​2000)

v4.16.1

Compare Source

Patch Changes

• Fix create-changeset job always skipped for external callers of the renovate-changeset reusable workflow (#​1991)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.29.3 to 9.30.0 (#​1993)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.29.2 to 9.29.3 (#​1988)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.30.0 to 9.31.0 (#​1994)

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.37.1 to v0.38.0 (#​1996)

• 📦 Update npm dependency eslint from 10.1.0 to 10.2.0 (#​1987)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.37.0 to v0.37.1 (#​1989)

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.36.5 to v0.37.0 (#​1985)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.31.0 to 9.32.0 (#​1995)

v4.16.0

Compare Source

Minor Changes

• Add internal Renovate config preset to roll up org config. (#​1983)

Patch Changes

• 📦 Update npm dependency pnpm (#​1980)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.36.4 to v0.36.5 (#​1979)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.29.0 to 9.29.1 (#​1981)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.29.1 to 9.29.2 (#​1982)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.36.3 to v0.36.4 (#​1977)

v4.15.0

Compare Source

Minor Changes

• Expose global-config input in reusable Renovate workflow (#​1973)

  Add a global-config input to the workflow_call and workflow_dispatch triggers in .github/workflows/renovate.yaml and pass it through to bfra-me/renovate-action. This allows consuming repositories to configure global-only Renovate options such as gitNoVerify.

Patch Changes

• Fix AGENTS.md file count and workflow documentation inaccuracies (#​1968)

• Replace stale HACK comment in scripts/release.ts with proper documentation explaining why monorepo root packages log the <name>@&#8203;<version> tag format for the Changesets action. Update AGENTS.md accordingly. (#​1974)

• 📦 Update npm dependency @bfra.me/eslint-config from 0.50.1 to 0.50.2 (#​1970)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.36.2 to v0.36.3 (#​1972)

v4.14.7

Compare Source

Patch Changes

• Remove job-level permissions from renovate-changeset reusable workflow to fix startup_failure when callers set restrictive workflow-level permissions. (#​1962)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.36.1 to v0.36.2 (#​1964)

v4.14.6

Compare Source

Patch Changes

• Update AGENTS.md to reflect current file structure (#​1918)

  • Correct renovate-changesets src file count from 96 to 125
  • Add missing files to renovate-changesets/AGENTS.md structure listing:
    action-config.ts, action-outputs.ts, changeset-info-formatter.ts,
    changeset-writer.ts, run-generation-helpers.ts, run-generation-outputs.ts,
    pr-comment-creator.ts, pr-description-updater.ts, summary-generator-types.ts,
    and utils/ directory
  • Add missing test files to listing: setup.ts, extract-dependencies-from-title.test.ts,
    phantom-dependency-regression.test.ts

• Broaden bot actor filter in renovate-changeset workflow to accept any GitHub App bot, not just bfra-me[bot] and renovate[bot]. (#​1956)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.28.0 to 9.29.0 (#​1954)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.27.0 to 9.28.0 (#​1949)

• 📦 Update npm dependency minimatch from 10.2.4 to 10.2.5 (#​1953)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.36.0 to v0.36.1 (#​1951)

v4.14.5

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.25.1 to 9.26.0 (#​1939)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.24.0 to 9.25.0 (#​1935)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.25.0 to 9.25.1 (#​1937)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.26.0 to 9.27.0 (#​1944)

• ⚙️ Update GitHub Actions workflow dependency fossas/fossa-action from v1.8.0 to v1.9.0 (#​1943)

• 📦 Update npm dependency pnpm (#​1936)

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.35.0 to v0.36.0 (#​1941)

• 📋 Update dependency bfra-me/renovate-config from 5.2.0 to 5.2.1 (#​1946)

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.34.1 to v0.35.0 (#​1932)

v4.14.4

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.23.0 to 9.24.0 (#​1924)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.34.0 to v0.34.1 (#​1928)

• 📦 Group update for npm dependencies: @vitest/coverage-v8, vitest (#​1929)

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.32.3 to v0.33.0 (#​1926)

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.33.0 to v0.34.0 (#​1927)

v4.14.3

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.14.0 to 9.14.1 (#​1901)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.32.1 to v0.32.2 (#​1916)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.18.0 to 9.19.0 (#​1911)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.19.0 to 9.20.0 (#​1912)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.16.0 to 9.17.0 (#​1908)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.14.1 to 9.15.0 (#​1904)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.17.0 to 9.18.0 (#​1909)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.20.0 to 9.21.0 (#​1917)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.15.0 to 9.16.0 (#​1906)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.22.0 to 9.23.0 (#​1920)

• 📦 Update npm dependency pnpm from 10.32.1 to 10.33.0 (#​1915)

• ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.34.1 to 4.35.0 (#​1910)

• 📦 Group update for npm dependencies: @vitest/coverage-v8, vitest (#​1903)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.21.0 to 9.22.0 (#​1919)

• ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.35.0 to 4.35.1 (#​1914)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.32.2 to v0.32.3 (#​1922)

v4.14.2

Compare Source

Patch Changes

• Fix self-checkout in reusable workflows: use GITHUB_WORKFLOW_REF to resolve the correct ref instead of github.workflow_sha, which resolves to the caller's SHA during workflow_call. (#​1897)

v4.14.1

Compare Source

Patch Changes

• Pass GitHub App token to self-checkout steps in reusable workflows for cross-repo access when called via workflow_call. (#​1893)

v4.14.0

Compare Source

Minor Changes

• Replace hardcoded SHA pins for internal actions in reusable workflows with self-checkout at github.workflow_sha. Actions now always match the workflow version — no timing gap, no recursive release cycle, no separate "update internal action SHA pins" automation needed for action packages. (#​1889)

v4.13.9

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.12.0 to 9.13.0 (#​1878)

• 📦 Group update for dependencies dependencies: Node.js, node (#​1882)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.13.0 to 9.14.0 (#​1880)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.32.0 to v0.32.1 (#​1883)

v4.13.8

Compare Source

Patch Changes

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.31.2 to v0.32.0 (#​1872)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.10.1 to 9.11.0 (#​1874)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.11.0 to 9.12.0 (#​1875)

v4.13.7

Compare Source

Patch Changes

• Force flatted to 3.4.2 to fix prototype pollution vulnerability (CVE-2026-33228) (#​1859)

  This addresses a HIGH severity security vulnerability in flatted <=3.4.1
  discovered via Dependabot alert #​39. The vulnerability allows prototype
  pollution via the parse() function in NodeJS.

  Since flatted is a transitive dependency of eslint via flat-cache and
  file-entry-cache, we add a pnpm override to ensure the patched version
  is used throughout the dependency tree.

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.10.0 to 9.10.1 (#​1868)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.31.1 to v0.31.2 (#​1863)

• 📦 Update npm dependency eslint from 10.0.3 to 10.1.0 (#​1869)

• 📦 Update npm dependency pnpm (#​1867)

v4.13.6

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.8.0 to 9.9.0 (#​1855)

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.30.10 to v0.31.1 (#​1861)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.9.0 to 9.10.0 (#​1857)

v4.13.5

Compare Source

Patch Changes

• 📦 Update GitHub Actions workflow dependencies: update-repository-settings, bfra-me/.github (#​1852)

v4.13.4

Compare Source

Patch Changes

• Migrate deprecated contexts field to checks in branch protection (#​1836)

  The contexts field in branch protection settings is deprecated. This change
  migrates to the newer checks format using the context property.

  • Update .github/settings.yml to use checks format
  • Maintain all existing status check requirements
  • Fixes GitHub API deprecation warning

  refs: https://docs.github.com/en/rest/branches/branch-protection#update-branch-protection

• ⚙️ Update GitHub Actions workflow dependency kentaro-m/auto-assign-action from v2.0.1 to v2.0.2 (#​1841)

• 📦 Group update for npm dependencies: @vitest/coverage-v8, vitest (#​1762)

• ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.34.0 to 4.34.1 (#​1845)

• ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.33.0 to 4.34.0 (#​1842)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.6.1 to 9.7.0 (#​1838)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.6.0 to 9.6.1 (#​1834)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.7.0 to 9.8.0 (#​1840)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.5.0 to 9.6.0 (#​1832)

v4.13.3

Compare Source

Patch Changes

• Skip changeset generation for auto-pin SHA update PRs to prevent recursive release cycles (#​1828)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.4.0 to 9.5.0 (#​1830)

• 📋 Update github-actions dependency internal (#​1827)

v4.13.2

Compare Source

Patch Changes

• 📋 Update github-actions dependency bfra-me/.github from 4.12.1 to 4.13.0 (#​1821)

• ⚠️ Update GitHub Actions workflow dependency bfra-me/renovate-action to v9 (9.4.0) (#​1770)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.30.9 to v0.30.10 (#​1823)

v4.13.1

Compare Source

Patch Changes

• 📦 Update GitHub Actions workflow dependencies: renovate-changesets, bfra-me/.github (#​1820)

v4.13.0

Compare Source

Minor Changes

• 📋 Update github-actions dependency bfra-me/.github from 4.11.0 to 4.12.1 (#​1807)

Patch Changes

• Auto-update internal action SHA pins during release (#​1815)

  • When renovate-changesets or update-repository-settings is released, automatically update the SHA pin and version comment in the corresponding workflow file
  • Eliminates the Renovate follow-up PR that previously updated the SHA pin, which generated an unnecessary patch changeset and extra release cycle

• ⚠️ Update GitHub Actions workflow dependency pnpm/action-setup to v5 (5.0.0) (#​1816)

• 📦 Update GitHub Actions workflow dependencies: renovate-changesets to v0.2.25 (#​1810)

v4.12.1

Compare Source

Patch Changes

• 📦 Update GitHub Actions workflow dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1806)

v4.12.0

Compare Source

Minor Changes

• 📋 Update github-actions dependency bfra-me/.github from 4.10.2 to 4.11.0 (#​1802)

Patch Changes

• 📦 Update GitHub Actions workflow dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1801)

v4.11.0

Compare Source

Minor Changes

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from 1e9e22259351e5266d65021b5b2a35a98da63d89 to 442fe99e017c4779b3d122ba42a297c39008b86b (#​1799)

Patch Changes

• 📋 Update github-actions dependency bfra-me/.github from 4.10.1 to 4.10.2 (#​1796)

v4.10.2

Compare Source

Patch Changes

• 🔒 Security update for GitHub Actions dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1794)

• 🔒 Security update for github-actions dependency bfra-me/.github from 4.10.0 to 4.10.1 (#​1793)

v4.10.1

Compare Source

Patch Changes

• 🔒 Security update for github-actions dependency bfra-me/.github from 4.9.0 to 4.10.0 (#​1788)

v4.10.0

Compare Source

Minor Changes

• 🔒 Security update for GitHub Actions dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1784)

Patch Changes

• 🔒 Security update for github-actions dependency bfra-me/.github from 4.8.1 to 4.9.0 (#​1785)

v4.9.0

Compare Source

Minor Changes

• 📦 Update GitHub Actions workflow dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1780)

Patch Changes

• 📋 Update dependencies dependency bfra-me/.github from 4.8.0 to 4.8.1 (#​1779)

v4.8.1

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.32.6 to 4.33.0 (#​1768)

• 📦 Update npm dependency pnpm (#​1767)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from 0.30.6 to 0.30.8 (#​1757)

• 📦 Update npm dependency lint-staged from 16.3.4 to 16.4.0 (#​1778)

• 📦 Update npm dependency lint-staged from 16.3.3 to 16.3.4 (#​1777)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 8.87.7 to 8.87.8 (#​1766)

• 📦 Update 6 GitHub Actions workflow dependencies (#​1769)

• 📦 Update 10 GitHub Actions workflow dependencies (#​1764)

v4.8.0

Compare Source

Minor Changes

• ⚠️ Update GitHub Actions workflow dependency action (#​1754)

Patch Changes

• 📦 Update npm dependency @types/node from 24.10.14 to 24.12.0 (#​1760)

v4.7.0

Compare Source

Minor Changes

• ⚠️ Update GitHub Actions workflow dependency actions/create-github-app-token from 2.2.2 to 3.0.0 (#​1751)

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency bfra-me/.github from 0.1.1 to 0.1.2 (#​1745)

• ⚙️ Update GitHub Actions workflow dependency dorny/paths-filter from 4.0.0 to 4.0.1 (#​1752)

• 📦 Group update for npm dependencies: pnpm, Age (#​1750)

• Add commitMessageTopic to Renovate config for action path visibility in PRs and changesets (#​1748)

  Configure commitMessageTopic for renovate-changesets and update-repository-settings actions
  so that Renovate PRs and changesets clearly identify the specific action being updated instead of
  only showing the repository name (bfra-me/.github).

  Before: chore(deps): update bfra-me/.github to v0.1.2
  After: chore(deps): update action update-repository-settings to v0.1.2

  Also update the renovate-changesets action parser to correctly extract the action name from PR
  titles that include the update action <name> phrase (produced by commitMessageTopic).

v4.6.0

Compare Source

Minor Changes

• ⚠️ Update github-actions dependencies: dorny/paths-filter (#​1731)

Patch Changes

• Add conditional to skip checkout on non-push events. (#​1744)

• ⚙️ Update github-actions dependencies: bfra-me/.github (#​1742)

v4.5.5

Compare Source

Patch Changes

• 📦 Update github-actions dependencies: actions/create-github-app-token, minimatch, undici and 8 more (#​1740)

• 📋 Update unknown dependencies: bfra-me/.github (#​1736)

v4.5.4

Compare Source

Patch Changes

• Fix renovate-changesets parsing for GitHub Actions updates so summaries use the correct manager, (#​1732)
  dependency names, and version details for action updates like dorny/paths-filter.

v4.5.3

Compare Source

Patch Changes

• Fix Renovate-generated changeset dependency summaries for single-dependency and digest update PRs. (#​1723)

• Fix Renovate config for internal actions: use correct depName (bfra-me/.github), explicitly disable digest update type to stop recursive self-referencing PRs, and change version comments to bare semver so Renovate can parse currentValue for release-based version tracking. (#​1727)

• Fix version extraction for internal actions by using matchDepNames instead of matchPackageNames in renovate.json5. For GitHub Actions with subdirectory paths, depName includes the full path (e.g., bfra-me/.github/.github/actions/renovate-changesets), while matchPackageNames only matches the normalized owner/repo format. (#​1721)

• 📋 Update github-actions dependencies: bfra-me/.github (#​1728)

• 📋 Update github-actions dependencies: bfra-me/.github (#​1726)

• 📦 Update bfra-me/.github action digests (renovate-changesets, update-repository-settings) (#​1724)

v4.5.2

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency pnpm/action-setup from v4.3.0 to v4.4.0 (#​1715)

• 📋 Update unknown dependencies: github-actions-dependencies (#​1710)

• 📦 Update dependency bfra-me/renovate-action to 8.87.6 (#​1714)

• Avoid recursive self-action update PRs. (#​1717)

v4.5.1

Compare Source

Patch Changes

• Use local action reference instead of pinned remote action in renovate-changeset workflow (#​1708)

  This prevents Renovate from creating PRs on every push to main in the .github repo.
  The workflow now uses ./.github/actions/renovate-changesets (local path) instead of
  bfra-me/.github/.github/actions/renovate-changesets@<sha>.

• Migrate deprecated contexts field to checks in common-settings.yaml branch protection settings (#​1698)

• Update bfra-me/.github action digest to 49859f7 (#​1707)

• Update bfra-me/.github action digest to c33c84c (#​1703)

• Update bfra-me/.github action digest to b1670c0 (#​1706)

• Update dependency lint-staged to 16.3.3 (#​1693)

• Update bfra-me/.github action digest to 61be6f0 (#​1704)

• Update bfra-me/.github action digest to d6bbf90 (#​1701)

• Update bfra-me/.github action digest to 16aab9f (#​1709)

v4.5.0

Compare Source

Minor Changes

• Add update-repository-settings action replacing elstudio/actions-settings with direct Octokit API calls. Fixes TypeError: this.topics.split is not a function when repository.topics is a YAML array. (#​1675)

Patch Changes

• Fix 422 error in update-repository-settings action when applying branch protection by sanitizing GET response shape before PUT. (#​1679)

• Updated GitHub Actions dependencies. (#​1687)

• Updated dependency packageManager to pnpm@10.32.0. (#​1686)

• Pin changesets/action to SHA e87c8ed # v1.7.0 in auto-release.yaml (#​1680)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.