chore(deps): bump pnpm/action-setup from 3 to 4

[dependabot]

Bumps pnpm/action-setup from 3 to 4.

Release notes

Sourced from pnpm/action-setup's releases.

v4.0.0

An error is thrown if one version of pnpm is specified in the packageManager field of package.json and a different version is specified in the action's settings #122

Commits

• 41ff726 feat: support installation from custom NPM registry (#179)
• f2b2b23 Remove --frozen-lockfile from examples (#171)
• 77504a5 Fix multiline run_install example in README.md (#167)
• d648c2d fix: not allow install multiple package manager (#161)
• a7487c7 feat: update dist
• fff7088 test: update pnpm to v9
• 6e3017a docs: support package.yaml (#157)
• 0cb0538 feat: support package.yaml (#156)
• e303250 docs: update pnpm version in readme examples (#154)
• ac5bf11 Update examples to use pnpm v9 (#142)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Summary by cubic

Upgrade CI to use pnpm/action-setup v4 across all jobs. This keeps our pnpm setup current and adds strict version checks.

• Migration
  • v4 fails if the pnpm version in packageManager differs from the action input. We set version: 10; ensure packageManager specifies pnpm@10 or update the input to match.

^{Written for commit 2af1149. Summary will update on new commits.}

[cubic-dev-ai]

1 issue found across 1 file

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name=".github/workflows/ci.yml">

<violation number="1" location=".github/workflows/ci.yml:22">
P1: Potential CI breakage: `pnpm/action-setup@v4` will error if `version` doesn't match the `packageManager` field in `package.json` (`pnpm@10.28.2`). Since `version: 10` resolves to the latest 10.x, this may trigger the new version mismatch check. With v4, you can remove `version` entirely — the action reads from `packageManager` in `package.json` automatically.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}

[cubic-dev-ai]

P1: Potential CI breakage: pnpm/action-setup@v4 will error if version doesn't match the packageManager field in package.json (pnpm@10.28.2). Since version: 10 resolves to the latest 10.x, this may trigger the new version mismatch check. With v4, you can remove version entirely — the action reads from packageManager in package.json automatically.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At .github/workflows/ci.yml, line 22:

<comment>Potential CI breakage: `pnpm/action-setup@v4` will error if `version` doesn't match the `packageManager` field in `package.json` (`pnpm@10.28.2`). Since `version: 10` resolves to the latest 10.x, this may trigger the new version mismatch check. With v4, you can remove `version` entirely — the action reads from `packageManager` in `package.json` automatically.</comment>

<file context>
@@ -19,7 +19,7 @@ jobs:
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v3
+        uses: pnpm/action-setup@v4
         with:
           version: 10
</file context>

Suggested change

	uses: actions/checkout@v4
	uses: pnpm/action-setup@v4

[dependabot]

Superseded by #26.