chore(deps): bump the github-actions group across 1 directory with 4 updates

[dependabot]

Bumps the github-actions group with 4 updates in the / directory: pnpm/action-setup, actions/github-script, tauri-apps/tauri-action and expo/expo-github-action.

Updates pnpm/action-setup from 4 to 6

Release notes

Sourced from pnpm/action-setup's releases.

v6.0.0

Added support for pnpm v11.

v5.0.0

Updated the action to use Node.js 24.

v4.4.0

Updated the action to use Node.js 24.

v4.3.0

What's Changed

• docs: fix the run_install example in the Readme by @​dreyks in pnpm/action-setup#175
• chore: remove unused @types/node-fetch dependency by @​silverwind in pnpm/action-setup#186
• Clarify that package_json_file is relative to GITHUB_WORKSPACE by @​chris-martin in pnpm/action-setup#184
• feat: store caching by @​jrmajor in pnpm/action-setup#188
• refactor: remove star imports by @​KSXGitHub in pnpm/action-setup#196
• fix(ci): exclude macos by @​KSXGitHub in pnpm/action-setup#197

New Contributors

• @​dreyks made their first contribution in pnpm/action-setup#175
• @​silverwind made their first contribution in pnpm/action-setup#186
• @​chris-martin made their first contribution in pnpm/action-setup#184
• @​jrmajor made their first contribution in pnpm/action-setup#188
• @​Boosted-Bonobo made their first contribution in pnpm/action-setup#199

Full Changelog: pnpm/action-setup@v4.2.0...v4.3.0

v4.2.0

When there's a .npmrc file at the root of the repository, pnpm will be fetched from the registry that is specified in that .npmrc file #179

v4.1.0

Add support for package.yaml #156.

Commits

• 0ebf471 fix: update pnpm to v11.7.0 (#267)
• 0e279bb fix: update pnpm to 11.1.1 (#248)
• 3e83581 fix: drop patchPnpmEnv so standalone+self-update works on Windows (#258)
• 551b42e docs(README): fix cache_dependency_path type (#257)
• 739bfe4 fix: self-update bootstrap to packageManager-pinned version (#233) (#256)
• f61705d chore: add CODEOWNERS
• 7a5507b fix: restore inputs from state in post (#255)
• 1155470 fix: honor devEngines.packageManager.onFail=error (#252) (#254)
• 91ab88e fix: bin_dest output points to self-updated pnpm, not bootstrap (#249)
• e578e19 fix: update pnpm to 11.0.4
• Additional commits viewable in compare view

Updates actions/github-script from 7.0.1 to 9.0.0

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

• getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
• Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

• require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
• getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
• If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

• Add ACTIONS_ORCHESTRATION_ID to user-agent string by @​Copilot in actions/github-script#695
• ci: use deployment: false for integration test environments by @​salmanmkc in actions/github-script#712
• feat!: add getOctokit to script context, upgrade @​actions/github v9, @​octokit/core v7, and related packages by @​salmanmkc in actions/github-script#700

New Contributors

• @​Copilot made their first contribution in actions/github-script#695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

v8.0.0

What's Changed

• Update Node.js version support to 24.x by @​salmanmkc in actions/github-script#637
• README for updating actions/github-script from v7 to v8 by @​sneha-krip in actions/github-script#653

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

• @​salmanmkc made their first contribution in actions/github-script#637
• @​sneha-krip made their first contribution in actions/github-script#653

Full Changelog: actions/github-script@v7.1.0...v8.0.0

v7.1.0

What's Changed

• Upgrade husky to v9 by @​benelan in actions/github-script#482
• Add workflow file for publishing releases to immutable action package by @​Jcambass in actions/github-script#485
• Upgrade IA Publish by @​Jcambass in actions/github-script#486
• Fix workflow status badges by @​joshmgross in actions/github-script#497
• Update usage of actions/upload-artifact by @​joshmgross in actions/github-script#512
• Clear up package name confusion by @​joshmgross in actions/github-script#514
• Update dependencies with npm audit fix by @​joshmgross in actions/github-script#515
• Specify that the used script is JavaScript by @​timotk in actions/github-script#478
• chore: Add Dependabot for NPM and Actions by @​nschonni in actions/github-script#472

... (truncated)

Commits

• 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
• ca10bbd fix: use @​octokit/core/types import for v7 compatibility
• 86e48e2 merge: incorporate main branch changes
• c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
• afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
• ff8117e ci: fix user-agent test to handle orchestration ID
• 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
• 3953caf docs: update README examples from @​v8 to @​v9, add getOctokit docs and v9 brea...
• c17d55b ci: add getOctokit integration test job
• a047196 test: add getOctokit integration tests via callAsyncFunction
• Additional commits viewable in compare view

Updates tauri-apps/tauri-action from 0 to 1

Release notes

Sourced from tauri-apps/tauri-action's releases.

action v1.0.0

[1.0.0]

• db4399e (#1194 by @​FabianLars) Breaking Change: .app.tar.gz & .app.tar.gz.sig files will now include the app version like all other bundles/installers.
• 53c8863 (#1315 by @​FabianLars) The download urls in latest.json will now use the github url instead of the browser download url.
• 9b64567 (#1167 by @​FabianLars) Breaking Change: Drop support for Tauri v1 and unstable v2 (alpha, beta, rc) versions.
• 9491f9d (#1177 by @​FabianLars) Breaking Change: The action will now fail if draft: true is set but the relevant release is not a draft.
• ab62863 (#1176 by @​FabianLars) The frontend lockfile detection will now move up the file tree to fix issues in workspaces.
• adb8bd3 (#1170 by @​FabianLars) Breaking Change: Remove includeRelease and includeDebug. You can switch to debug builds via args: --debug. To upload release and debug builds, run tauri-action twice, preferably in a job matrix for concurrent builds.
• eea1890 (#1175 by @​FabianLars) Improved runner detection to prevent silent fails if runner (npm, pnpm, yarn, bun) was not installed while a lockfile was present.
• acc588b (#1203 by @​FabianLars) Added initial Android & iOS support. This only includes building (=== running tauri android|ios build), installing dependencies and uploading to stores must be done manually.
• 2e37e06 (#1174 by @​FabianLars) Use npm exec instead of npm run if @tauri-apps/cli was detected with no tauri script in package.json.
• 1898cf4 (#1186 by @​FabianLars) Fiixed an issue that caused outdated signatures for macos universal builds in latest.json when re-running the action on the same release multiple times.
• 5c7403d (#1326 by @​FabianLars) Expose mainBinaryName in releaseAssetNamePattern and workflowArtifactNamePattern.
• 5d35c8e (#1189 by @​FabianLars) The upload release assets will now have the original file as its label which will show as the filename on the GitHub Release page and will be used internally to update assets on reruns and to get the download urls for latest.json
• c18827e (#1183 by @​FabianLars) Breaking Change: Renamed assetNamePattern to releaseAssetNamePattern.
• 766720b (#1172 by @​FabianLars) Breaking Change: Removed the feature to automatically initialize a Tauri project.
• 25f3730 (#1208 by @​FabianLars) Breaking Change: Renamed includeUpdaterJson to uploadUpdaterJson for consistency with other similar options.
• 53c8863 (#1315 by @​FabianLars) Removed Gitea support.
• 6d11c27 (#1185 by @​FabianLars) Breaking Change: Removed updaterJsonKeepUniversal. This is now always enabled.
• 7485c95 (#1169 by @​FabianLars) Switch from unmaintained @iarna/toml to smol-toml. No user-facing changes.
• 8236c82 (#1277 by @​FabianLars) Semi-Breaking Change: The action will now update the name and body of existing releases.
• 05c1b09 (#1178 by @​FabianLars) Added built-in variant of actions/upload-artifact to easily upload each bundle as a seperate archive. This may be removed once actions/upload-artifact#331 lands.
• 6434f9a (#1296 by @​Ludea) Added initial support for vite+.

action v0.6.2

[0.6.2]

• 73e111f (#1288) The action can now detect the workspace root correctly if the tauri project is configured as the cargo workspace root.

action v0.6.1

[0.6.1]

• ad5c271 (#1241 by @​FabianLars) Fixed an issue that caused the action to only read one --config arg.

action v0.6.0

[0.6.0]

• e918a06 (#1133) Encode tagName option value in latest.json URL.
• 45acc19 (#1164) Add generateReleaseNotes config to use GitHub's release notes API to auto generate the release name and/or body.
• 59a1a70 (#1166) Fix default file name pattern to match tauri's file names again.
• 08112f7 (#1106) Added experimental support for Gitea hosted instances.
• 08112f7 (#1106) Added a config to set the GitHub API URL which should help users with self-hosted instances and those using GitHub Enterprise.
• b067139 (#1130) The action now uses node v24 which raises the minimum GitHub runner version to v2.327.1.

action v0.5.25

... (truncated)

Changelog

Sourced from tauri-apps/tauri-action's changelog.

[0.5.21]

• 5666b68 (#1030 by @​997R8V10) retryAttempts is now also applied to uploads.

Commits

• 1deb371 Apply Version Updates From Current Changes (#1191)
• 35033cf chore(deps): update dependency @​vercel/ncc to v0.44.0 (#1323)
• 5ead4aa refactor: simplify createArtifact function (#1327)
• 7899682 ci: update actions (#1328)
• f201b79 chore(deps): update dependency @​types/node to v24.13.2 (#1320)
• 5c7403d feat: default naming scheme for mobile assets, closes #1317 (#1326)
• 71e781d chore(deps): update dependency @​biomejs/biome to v2.5.1 (#1318)
• f51677a chore(deps): update dependency smol-toml to v1.7.0 (#1324)
• 61337b4 chore(deps): update dependency @​types/node to v24.12.3 (#1316)
• 53c8863 refactor: Use github api as download url in latest.json (#1315)
• Additional commits viewable in compare view

Updates expo/expo-github-action from 8 to 9

Release notes

Sourced from expo/expo-github-action's releases.

9.0.0

9.0.0 (2026-06-02)

⚠ BREAKING CHANGES

• update tooling and actions to Node 24 (#354)

New features

• continuous-deploy-fingerprint: Add optional environment input for EAS updates (#325) (8134c7a)
• continuous-deploy-fingerprint: added platform arg to eas update command (#319) (332258e)

Bug fixes

• continuous-deploy-fingerprint: correct expiration date logic for build validation (#307) (4b7860b)
• fingerprint hash parsing (#326) (10bd583)
• one more merge confict fix (#327) (24136f8)

Other chores

• commit built files from #319 (#323) (a88f4a0)
• update readme to better clarify production continuous deployment caveats (#328) (d933805)
• update tooling and actions to Node 24 (#354) (94ad6f3)

Documentation changes

• missing action inputs added to readme (#275) (047ecf1)
• preview: fix typo in readme (f6f3acf)

8.2.1

8.2.1 (2024-01-15)

Bug fixes

• preview: filter slugs with special characters to match dev clients exp+<slug> scheme (#252) (b8a9be8)

8.2.0

8.2.0 (2023-12-02)

New features

• preview: add qr-target and use proper QR codes for expo-go and dev-build (#247) (54efbfd)

Documentation changes

• preview: clarify the branch and workflow trigger relations (#246) (ccfad6f)

... (truncated)

Changelog

Sourced from expo/expo-github-action's changelog.

5.3.0 (2020-09-19)

New features

• add expo token authentication method (#57) (1c36889)

5.2.0 (2020-07-14)

Bug fixes

• proper space between icon and text (#50) (b8a49f4)

Code refactors

• use github actions instead of circle (#54) (d3602b9)

Documentation changes

• fix grammar and link in readme (#53) (6ac67f0)
• update build badge in readme (#56) (050b701)

Other chores

• upgrade all dependencies to latest version (#55) (404bd09)

5.1.1 (2020-06-10)

Bug fixes

• use inputs metadata key (#49) (71dfeab)

Commits

• eab7a23 chore: create new release 9.0.0
• 94ad6f3 chore!: update tooling and actions to Node 24 (#354)
• b184ff8 [fingerprint] fix db saving (#337)
• 980b700 update packages (#334)
• d933805 chore: update readme to better clarify production continuous deployment cavea...
• 24136f8 fix: one more merge confict fix (#327)
• 10bd583 fix: fingerprint hash parsing (#326)
• 97334d3 [continuous-deploy-fingerprint] Add action and docs for continuous deployment...
• 8134c7a feat(continuous-deploy-fingerprint): Add optional environment input for EAS u...
• a88f4a0 chore: commit built files from #319 (#323)
• Additional commits viewable in compare view

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml