Bump the actions group with 2 updates

[dependabot]

Bumps the actions group with 2 updates: pnpm/setup and aws-actions/configure-aws-credentials.

Updates pnpm/setup from 2.0.2 to 2.1.0

Release notes

Sourced from pnpm/setup's releases.

v2.1.0

What's Changed

• fix: restore cache before installing runtime by @​Stanzilla in pnpm/setup#39
• feat: install multiple runtimes from devEngines.runtime by @​BlankParticle in pnpm/setup#32
• perf: cache pnpm's lockfile verification results by @​zkochan in pnpm/setup#30
• feat: add working-directory, deprecating package-json-file by @​haines in pnpm/setup#27
• feat: add a require-lockfile input by @​sebdanielsson in pnpm/setup#23
• ci: update dependencies with pnpm/update instead of Dependabot by @​zkochan in pnpm/setup#41
• chore: update dependencies by @​github-actions[bot] in pnpm/setup#42

New Contributors

• @​Stanzilla made their first contribution in pnpm/setup#39
• @​BlankParticle made their first contribution in pnpm/setup#32
• @​haines made their first contribution in pnpm/setup#27
• @​sebdanielsson made their first contribution in pnpm/setup#23
• @​github-actions[bot] made their first contribution in pnpm/setup#42

Full Changelog: pnpm/setup@v2.0.2...v2.1.0

Commits

• 703c526 chore: update dependencies (#42)
• e02cd34 ci: update dependencies with pnpm/update instead of Dependabot (#41)
• 0080eca feat: add a require-lockfile input (#23)
• 3327d57 feat: add working-directory, deprecating package-json-file (#27)
• 0e9f373 perf: cache pnpm's lockfile verification results (#30)
• f2f7d5f feat: install multiple runtimes from devEngines.runtime (#32)
• 1dad155 fix: restore cache before installing runtime (#39)
• See full diff in compare view

Updates aws-actions/configure-aws-credentials from 6.2.3 to 6.2.4

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.2.4

6.2.4 (2026-08-31)

Bug Fixes

• account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
• skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.2.4 (2026-08-31)

Bug Fixes

• account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
• skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

6.2.3 (2026-07-22)

Bug Fixes

• attach git credentials before Tag Major Version push (#1877) (9ae780b)
• PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

6.2.2 (2026-07-07)

Miscellaneous Chores

• release 6.2.2 (d01d678)

6.2.1 (2026-06-26)

Bug Fixes

• enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

• add additional session tags by default (#1775) (e0ba768)
• add more retry logic and better logging (#1764) (540d0c1)
• add regex validation to role-session-name (#1765) (e354499)
• Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
• expose run id in STS client user-agent (#1774) (29d1be3)
• support custom STS endpoints (#1762) (8d52d05)

Bug Fixes

• skip credential check on output-env-credentials: false (#1778) (58e7c47)
• assumeRole failing from session tag size too large (#1808) (d6f5dc3)

... (truncated)

Commits

• cbe3b39 chore(main): release 6.2.4 (#1942)
• 58065db chore(deps): bump js-yaml (#1944)
• 609df23 chore: Update dist
• aa65264 fix: account-ids handling, mask proxy as secret in logs (#1943)
• 7fdbbb8 chore: Update dist
• 3852440 fix: skip backoff sleep after the final retryAndBackoff attempt (#1937)
• c16f89b mention renamed repos use the new immutable identifiers (#1941)
• 9c362ee chore: Update dist
• d5f8da8 chore(deps): bump @​aws-sdk/client-sts from 3.1111.0 to 3.1116.0 (#1935)
• 2db2497 chore: Update dist
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/aws-actions/configure-aws-credentials	cbe3b392738ccf3f987d68400dafcf4b0624a56c	🟢 6.2	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10 Code-Review ⚠️ 1 Found 2/12 approved changesets -- score normalized to 1 Binary-Artifacts 🟢 10 no binaries found in the repo Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 1 dependency not pinned by hash detected -- score normalized to 1 License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected SAST 🟢 10 SAST tool is run on all commits Branch-Protection 🟢 8 branch protection is not maximal on development and all release branches
actions/pnpm/setup	703c52620218391530e48b9e8870d5c0082e1b9b	Unknown	Unknown

Scanned Files

• .github/workflows/deploy.yml