From f36bcead8aacd1ae0bfa82165f0273427fda4594 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 1 Sep 2026 14:49:55 +0000
Subject: [PATCH 1/3] Bump pnpm/action-setup from 4 to 6

Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4 to 6.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/v4...v6)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/update.yaml | 2 +-
 action.yml                    | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/update.yaml b/.github/workflows/update.yaml
index 2e3eef5..9c6b717 100644
--- a/.github/workflows/update.yaml
+++ b/.github/workflows/update.yaml
@@ -40,7 +40,7 @@ jobs:
 
       - name: Setup pnpm
         # v6.0.9
-        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86
         with:
           version: 9
 
diff --git a/action.yml b/action.yml
index 2a99848..1233429 100644
--- a/action.yml
+++ b/action.yml
@@ -47,7 +47,7 @@ runs:
       shell: bash
 
     - if: env.COPIER_CHANGED == 'true' && hashFiles('pnpm-lock.yaml') != ''
-      uses: pnpm/action-setup@v4
+      uses: pnpm/action-setup@v6
       with:
         version: 9
       continue-on-error: true
@@ -56,7 +56,7 @@ runs:
       shell: bash
       continue-on-error: true
     - if: env.COPIER_CHANGED == 'true' && hashFiles('js/pnpm-lock.yaml') != ''
-      uses: pnpm/action-setup@v4
+      uses: pnpm/action-setup@v6
       with:
         version: 9
         package_json_file: js/package.json

From 534c8af3e36ee98d227f0f165a47d64560145a83 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Tue, 1 Sep 2026 10:53:25 -0400
Subject: [PATCH 2/3] Update action.yml

---
 action.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/action.yml b/action.yml
index 1233429..3513e26 100644
--- a/action.yml
+++ b/action.yml
@@ -47,7 +47,7 @@ runs:
       shell: bash
 
     - if: env.COPIER_CHANGED == 'true' && hashFiles('pnpm-lock.yaml') != ''
-      uses: pnpm/action-setup@v6
+      uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       with:
         version: 9
       continue-on-error: true
@@ -56,7 +56,7 @@ runs:
       shell: bash
       continue-on-error: true
     - if: env.COPIER_CHANGED == 'true' && hashFiles('js/pnpm-lock.yaml') != ''
-      uses: pnpm/action-setup@v6
+      uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       with:
         version: 9
         package_json_file: js/package.json
@@ -67,7 +67,7 @@ runs:
       continue-on-error: true
 
     - if: env.COPIER_CHANGED == 'true' && hashFiles('Cargo.lock', 'rust/Cargo.lock') != ''
-      uses: dtolnay/rust-toolchain@stable
+      uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # latest
       with:
         toolchain: stable
       continue-on-error: true

From bbc3b7f386eb8a1824f0147b513808f9cd4673e0 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Tue, 1 Sep 2026 10:53:32 -0400
Subject: [PATCH 3/3] Update update.yaml

---
 .github/workflows/update.yaml | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/update.yaml b/.github/workflows/update.yaml
index 9c6b717..dda2a04 100644
--- a/.github/workflows/update.yaml
+++ b/.github/workflows/update.yaml
@@ -27,26 +27,22 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        # v7.0.1
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
       - name: Setup Python
-        # v7.0.0
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: '3.12'
 
       - name: Setup pnpm
-        # v6.0.9
-        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
         with:
           version: 9
 
       - name: Setup Rust
-        # latest
-        uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c
+        uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # latest
         with:
           toolchain: stable