Bump pnpm/action-setup from 5.0.0 to 6.0.3

[dependabot]

Bumps pnpm/action-setup from 5.0.0 to 6.0.3.

Release notes

Sourced from pnpm/action-setup's releases.

v6.0.3

Updated pnpm to v11.0.0-rc.5

Full Changelog: pnpm/action-setup@v6.0.2...v6.0.3

v6.0.2

What's Changed

• fix: pnpm self-update binary shadowed by bootstrap on PATH by @​oniani1 in pnpm/action-setup#230

New Contributors

• @​oniani1 made their first contribution in pnpm/action-setup#230

Full Changelog: pnpm/action-setup@v6.0.1...v6.0.2

v6.0.1

Update pnpm to v11.0.0-rc.2. pnpm-lock.yaml will not be saved with two documents unless the packageManager is set via devEngines.packageManager. Related issue: pnpm/action-setup#228

v6.0.0

Added support for pnpm v11.

Commits

• 903f9c1 fix: update pnpm to 11.0.0-rc.5
• bdf0af2 test: add strict version-match jobs to reproduce #225 / #227
• 71c9247 fix: pnpm self-update binary shadowed by bootstrap on PATH (#230)
• 078e9d4 fix: update pnpm to 11.0.0-rc.2
• 08c4be7 docs(README): update action-setup version
• 5798914 chore: update .gitignore
• ddffd66 fix: remove accidentally committed file
• b43f991 fix: update pnpm to 11.0.0-rc.0
• 3852509 README.md: bring versions up-to-date (#222)
• 6e7bdbd chore: bump bootstrap pnpm to 11.0.0-beta.4-1 and add update script
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[greptile-apps]

Greptile Summary

This is a routine Dependabot PR bumping pnpm/action-setup from v5.0.0 to v6.0.3 across all five job definitions in ci.yml and release.yml. The SHA pins are updated correctly and the inline version comments now reflect v6.0.3. No logic changes were made to either workflow.

Confidence Score: 5/5

Safe to merge — routine action pin bump with no workflow logic changes.

Only SHA pins and version comments are changed; the action upgrade (v5→v6) adds pnpm v11 support and bug fixes, with no breaking changes to the usage pattern in these workflows. All SHAs are correctly pinned.

No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/ci.yml	Updated pnpm/action-setup SHA pin to v6.0.3 in all four CI jobs (check, workers-runtime, matrix, package-validation); no other changes.
.github/workflows/release.yml	Updated pnpm/action-setup SHA pin to v6.0.3 in the single release job; no other changes.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    PR[Push / Pull Request] --> check[check job\ncheckout → pnpm/action-setup v6.0.3 → setup-node\ninstall → lint → type-check → build → test → bundle-guard → size]
    check --> workers[workers-runtime job\ncheckout → pnpm/action-setup v6.0.3 → setup-node\ninstall → test:workers]
    check --> matrix[matrix job\nNode 20 / 22 / 24\ncheckout → pnpm/action-setup v6.0.3 → setup-node\ninstall → build → test]
    check --> pkgval[package-validation job\ncheckout → pnpm/action-setup v6.0.3 → setup-node\ninstall → build → publint → attw]

    Push[Push to main] --> release[release job\ncheckout → pnpm/action-setup v6.0.3 → setup-node\ninstall → build → lint → type-check → test → bundle-guard → size → publint → attw → changesets/action]

Loading

_{Reviews (1): Last reviewed commit: "Bump pnpm/action-setup from 5.0.0 to 6.0..." | Re-trigger Greptile}

[dependabot]

Superseded by #21.