[renovate]

This PR contains the following updates:

Package	Type	Update	Change
peter-evans/create-pull-request	action	patch	v8.1.1 → v8.1.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

peter-evans/create-pull-request

v8.1.2: Create Pull Request v8.1.2

Compare Source

What's Changed

• Update distribution by @​actions-bot in #​4361
• build(deps-dev): bump the npm group with 2 updates by @​dependabot[bot] in #​4372
• refactor: replace uuid dep with Node.js built-in crypto.randomUUID by @​peter-evans in #​4377
• build(deps): update to jest 30 by @​peter-evans in #​4388
• build(deps-dev): bump the npm group across 1 directory with 7 updates by @​dependabot[bot] in #​4391
• build(deps-dev): bump undici from 6.25.0 to 6.27.0 by @​dependabot[bot] in #​4386
• build(deps-dev): bump js-yaml from 4.2.0 to 5.0.0 by @​dependabot[bot] in #​4387
• chore: pin actions to commit shas by @​peter-evans in #​4406
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in #​4411
• build(deps-dev): bump the npm group with 2 updates by @​dependabot[bot] in #​4418
• build(deps-dev): bump js-yaml from 5.2.0 to 5.2.1 by @​dependabot[bot] in #​4423
• build(deps-dev): bump js-yaml from 5.2.1 to 5.2.2 by @​dependabot[bot] in #​4430
• build(deps-dev): bump the npm group with 4 updates by @​dependabot[bot] in #​4436
• build(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in #​4435
• build(deps): bump brace-expansion by @​dependabot[bot] in #​4446
• build(deps-dev): bump the npm group with 4 updates by @​dependabot[bot] in #​4452
• Update distribution by @​actions-bot in #​4457
• build(deps-dev): bump browserslist from 4.28.4 to 4.28.8 by @​dependabot[bot] in #​4462
• build(deps-dev): bump js-yaml from 4.2.0 to 5.4.2 by @​dependabot[bot] in #​4468
• build(deps-dev): bump undici from 6.28.0 to 6.29.0 by @​dependabot[bot] in #​4478
• build(deps-dev): bump the npm group with 4 updates by @​dependabot[bot] in #​4483
• build(deps): bump brace-expansion by @​dependabot[bot] in #​4486
• build(deps-dev): bump handlebars from 4.7.9 to 4.7.10 by @​dependabot[bot] in #​4494
• build(deps-dev): bump undici from 6.29.0 to 6.29.1 by @​dependabot[bot] in #​4504
• build(deps): bump the github-actions group with 3 updates by @​dependabot[bot] in #​4510
• build(deps-dev): bump the npm group with 4 updates by @​dependabot[bot] in #​4509
• Fix submodule deletion with sign-commits by @​MrSubidubi in #​4473

New Contributors

• @​MrSubidubi made their first contribution in #​4473

Full Changelog: peter-evans/create-pull-request@v8.1.1...v8.1.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hanthor-hive-agent]

4aed057

⚠️ Sentinel alert — maintainer review required

Hive flagged this PR (author @renovate[bot], head 4aed057799c3) because it matches behaviors that can override security controls, escalate privileges or damage the codebase. This is a heuristic, not an accusation — a maintainer should confirm the change is intended before it merges.

• sensitive_path — changes 1 sensitive path(s) (Touches a sensitive path (OWNERS, workflows, policies, hive config, security docs, …))
  • .github/workflows/roadmap-index-automation.yml

Hive added the sentinel-alert label. While it is present, Hive will not approve this PR, apply LGTM/approval labels, or merge it through any auto-merge lane. Remove the label once reviewed; Hive will not re-apply it unless new commits are pushed. Tune paths and behaviors under sentinel in hive.yaml or the dashboard Security tab.