[dependabot]

Bumps the gha-deps group with 1 update: pnpm/setup.

Updates pnpm/setup from 3.0.0 to 3.1.1

Release notes

Sourced from pnpm/setup's releases.

v3.1.1

What's Changed

• chore: update dependencies by @​github-actions[bot] in pnpm/setup#54

Full Changelog: pnpm/setup@v3.1.0...v3.1.1

v3.1.0

What's Changed

• feat: add save-cache and skip saving an unchanged store by @​EhabY in pnpm/setup#65
• fix: exit once the action settles and time out the runtime version listing by @​okisdev in pnpm/setup#70
• fix: prefer locked pnpm by @​MindTooth in pnpm/setup#72
• feat: add a registry input for downloading pnpm from a mirror by @​yoo-mat in pnpm/setup#74

New Contributors

• @​EhabY made their first contribution in pnpm/setup#65
• @​okisdev made their first contribution in pnpm/setup#70
• @​MindTooth made their first contribution in pnpm/setup#72
• @​yoo-mat made their first contribution in pnpm/setup#74

Full Changelog: pnpm/setup@v3.0.0...v3.1.0

Commits

• a088197 chore: update dependencies (#54)
• f618924 feat: add a registry input for downloading pnpm from a mirror (#74)
• 4fe0be1 fix: prefer locked pnpm (#72)
• 881f070 fix: exit once the action settles and time out the runtime version listing (#70)
• 0da5501 feat: add save-cache and skip saving an unchanged store (#65)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Note

Low Risk
Workflow-only dependency pin bump with no application or secrets logic changes; risk is limited to CI/release install behavior from the third-party action.

Overview
Updates the pinned pnpm/setup GitHub Action from v3.0.0 to v3.1.1 in CI and release workflows. The change applies to the lint job, the Node matrix test job in ci.yml, and the release job in release.yml; step inputs (node-version-file, cache, require-lockfile) are unchanged.

This picks up upstream fixes and behavior improvements in the action (e.g. preferring lockfile pnpm, cache/save-cache behavior, and runtime listing timeouts) without changing how this repo configures Node or pnpm in those steps.

^{Reviewed by Cursor Bugbot for commit e1960bd. Bugbot is set up for automated code reviews on this repo. Configure here.}

[greptile-apps]

PR author is in the excluded authors list.