Skip to content

chore(deps): update ferrlabs/.github digest to c4121e7 - #340

Open
ferrlabs-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ferrlabs-actions
Open

ferrlabs-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ferrlabs-actions

Conversation

@ferrlabs-renovate

@ferrlabs-renovate ferrlabs-renovate Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
FerrLabs/.github (changelog) workflow digest 539e9acc4121e7

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@ferrlabs-renovate
ferrlabs-renovate Bot enabled auto-merge (squash) September 7, 2026 12:14
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/renovate-rebase.yml Fixed
Comment thread .github/workflows/security-scan.yml Fixed
@github-actions

github-actions Bot commented Sep 7, 2026

Copy link
Copy Markdown

SonarQube — aucune nouvelle issue

Comparaison entre le projet bac à sable de cette PR et la branche par défaut : SonarQube Community n'analyse pas les PR, ce delta est calculé côté CI. Détail

@ferrfleet ferrfleet Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What changed: the only substantive commit in this digest range (FerrLabs/.github 539e9ac → 84f4447, #335) changes reusable-ci-node.yml's pnpm-version input default from '10' to ''. Empty now means pnpm/action-setup reads the pnpm version from the caller's package.json (packageManager or devEngines.packageManager) instead of hardcoding v10.

What breaks here: this repo's package.json has no packageManager field, only engines.pnpm: ">=9.0.0" (a range, not an exact pin), which pnpm/action-setup doesn't read. That's exactly why CI is failing.

Why CI fails: Test / Test & Build and Test / Quality (knip, madge, audit) both fail at the pnpm/action-setup step with: "Unable to determine pnpm version... provide it via the action's version input, or package.json's packageManager / devEngines.packageManager field." This is a real incompatibility introduced by the upstream default change, not a flake or a pre-existing failure.

Blocking: add a packageManager field to package.json (e.g. "packageManager": "pnpm@9.x.x", matching whatever pnpm version this repo currently builds with) before merging, or this and every future PR will fail CI until that's done.

@ferrlabs-renovate
ferrlabs-renovate Bot force-pushed the renovate/ferrlabs-actions branch 4 times, most recently from 9cbbdda to 4bb48c5 Compare September 14, 2026 12:29
@ferrlabs-renovate ferrlabs-renovate Bot changed the title chore(deps): update ferrlabs/.github digest to 84f4447 chore(deps): update ferrlabs/.github digest to c2ba2d8 Sep 14, 2026
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/renovate-rebase.yml Fixed
Comment thread .github/workflows/security-scan.yml Fixed
@ferrlabs-renovate
ferrlabs-renovate Bot force-pushed the renovate/ferrlabs-actions branch 2 times, most recently from fb96c9f to c343c73 Compare September 16, 2026 21:13
@ferrlabs-renovate ferrlabs-renovate Bot changed the title chore(deps): update ferrlabs/.github digest to c2ba2d8 chore(deps): update ferrlabs/.github digest to 5ff5438 Sep 16, 2026
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/renovate-rebase.yml Fixed
Comment thread .github/workflows/security-scan.yml Fixed
@ferrlabs-renovate
ferrlabs-renovate Bot force-pushed the renovate/ferrlabs-actions branch 2 times, most recently from 10f8dd1 to a51eab5 Compare September 17, 2026 20:50
@ferrlabs-renovate ferrlabs-renovate Bot changed the title chore(deps): update ferrlabs/.github digest to 5ff5438 chore(deps): update ferrlabs/.github digest to 9de9605 Sep 17, 2026
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/security-scan.yml Fixed
@ferrlabs-renovate
ferrlabs-renovate Bot force-pushed the renovate/ferrlabs-actions branch 2 times, most recently from 9ceaba1 to dc10aa4 Compare September 18, 2026 08:06
@ferrlabs-renovate ferrlabs-renovate Bot changed the title chore(deps): update ferrlabs/.github digest to 9de9605 chore(deps): update ferrlabs/.github digest to efe7f97 Sep 18, 2026
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/security-scan.yml Fixed
@ferrlabs-renovate
ferrlabs-renovate Bot force-pushed the renovate/ferrlabs-actions branch from dc10aa4 to 6224be0 Compare September 18, 2026 10:06
@ferrlabs-renovate ferrlabs-renovate Bot changed the title chore(deps): update ferrlabs/.github digest to efe7f97 chore(deps): update ferrlabs/.github digest to c4121e7 Sep 18, 2026
Comment thread .github/workflows/ci.yml
packages: read
name: Test
uses: FerrLabs/.github/.github/workflows/reusable-ci-node.yml@539e9aca37e08abde8d9cefbe13cd98fa62b1b41 # main
uses: FerrLabs/.github/.github/workflows/reusable-ci-node.yml@c4121e79b9e15551efce374b7e9f4990667b9a36 # main
Comment thread .github/workflows/ci.yml
contents: write
id-token: write
uses: FerrLabs/.github/.github/workflows/reusable-ferrflow-release.yml@539e9aca37e08abde8d9cefbe13cd98fa62b1b41 # main
uses: FerrLabs/.github/.github/workflows/reusable-ferrflow-release.yml@c4121e79b9e15551efce374b7e9f4990667b9a36 # main
scan:
name: Secrets + CVE
uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@539e9aca37e08abde8d9cefbe13cd98fa62b1b41 # main
uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@c4121e79b9e15551efce374b7e9f4990667b9a36 # main

@ferrfleet ferrfleet Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Follow-up: the digest range now extends past what I last reviewed (through FerrLabs/.github#337-343). Checked the new commits in that range:

  • #337 bumps the pinned FerrFlow action to v7.21.1 in reusable-ferrflow-release.yml — patch bump, no new inputs/secrets.
  • #339 drops the renovate workflow, #342 changes docker-build runner defaults — neither reusable is referenced by this repo's workflows (only reusable-ci-node.yml, reusable-ferrflow-release.yml, reusable-pr-title.yml, reusable-security-scan.yml are used), so both are no-ops here.
  • #340/#343 make the sonar reusable skip analysis on pull_request events — this repo has enable-sonar: true, but sonar isn't a required check, so this just means PR sonar comments stop; no breakage.

The blocking finding from my previous review is still open and unchanged: package.json still has no packageManager field, only engines.pnpm: ">=9.0.0", and Test / Test & Build and Test / Quality still fail at pnpm/action-setup with the same "No pnpm version is specified" error. Not repeating the detail here since nothing changed on that front, see the earlier review comment.

@ferrlabs-renovate
ferrlabs-renovate Bot force-pushed the renovate/ferrlabs-actions branch from 6224be0 to 5c5deff Compare September 18, 2026 14:02
@ferrlabs-renovate
ferrlabs-renovate Bot force-pushed the renovate/ferrlabs-actions branch from 5c5deff to 1399a41 Compare September 18, 2026 16:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant