chore(deps): bump the actions group with 3 updates

[dependabot]

Bumps the actions group with 3 updates: rharkor/caching-for-turbo, pnpm/action-setup and actions/github-script.

Updates rharkor/caching-for-turbo from 2.3.11 to 2.3.13

Release notes

Sourced from rharkor/caching-for-turbo's releases.

v2.3.13

2.3.13 (2026-04-11)

Documentation

• v (614e6fa)

Miscellaneous Chores

• sync: restore package.json from main (8ce1c7e)

v2.3.12

2.3.12 (2026-04-11)

Bug Fixes

• deps (e8f53c4)
• deps: update dependency @​actions/cache to v6 (9b21c2a)
• deps: update dependency @​actions/core to v3 (10e99b5)
• ts package (7861008)

Miscellaneous Chores

• bump node (9e9ff61)
• deps: update aws-sdk-js-v3 monorepo to v3.1000.0 (#802) (992c329)
• deps: update aws-sdk-js-v3 monorepo to v3.1001.0 (#808) (55fe73f)
• deps: update aws-sdk-js-v3 monorepo to v3.1002.0 (#809) (f0f34b1)
• deps: update aws-sdk-js-v3 monorepo to v3.1003.0 (#812) (d1ba13f)
• deps: update aws-sdk-js-v3 monorepo to v3.1004.0 (#817) (caf6518)
• deps: update aws-sdk-js-v3 monorepo to v3.1005.0 (#820) (db9f150)
• deps: update aws-sdk-js-v3 monorepo to v3.1006.0 (#823) (72147bb)
• deps: update aws-sdk-js-v3 monorepo to v3.1007.0 (#826) (db29c13)
• deps: update aws-sdk-js-v3 monorepo to v3.1008.0 (#828) (4bbbd56)
• deps: update aws-sdk-js-v3 monorepo to v3.1009.0 (#831) (743bdb1)
• deps: update aws-sdk-js-v3 monorepo to v3.1010.0 (#833) (176bbd8)
• deps: update aws-sdk-js-v3 monorepo to v3.1011.0 (#834) (d957774)
• deps: update aws-sdk-js-v3 monorepo to v3.1012.0 (#836) (b7c7010)
• deps: update aws-sdk-js-v3 monorepo to v3.1013.0 (#840) (947ef31)
• deps: update aws-sdk-js-v3 monorepo to v3.1014.0 (#841) (ec9ce5e)
• deps: update aws-sdk-js-v3 monorepo to v3.1021.0 (#848) (d8dc7df)
• deps: update aws-sdk-js-v3 monorepo to v3.1022.0 (#854) (e0852ac)
• deps: update aws-sdk-js-v3 monorepo to v3.1023.0 (#856) (2181092)
• deps: update aws-sdk-js-v3 monorepo to v3.1024.0 (#859) (138f946)
• deps: update aws-sdk-js-v3 monorepo to v3.1025.0 (#862) (355236d)
• deps: update aws-sdk-js-v3 monorepo to v3.1026.0 (#865) (6ecb4cc)
• deps: update aws-sdk-js-v3 monorepo to v3.1027.0 (#867) (cfb6e0d)
• deps: update aws-sdk-js-v3 monorepo to v3.1028.0 (#868) (56819b2)
• deps: update aws-sdk-js-v3 monorepo to v3.1029.0 (#873) (72dc7b2)
• deps: update aws-sdk-js-v3 monorepo to v3.972.0 (#738) (6b26370)
• deps: update aws-sdk-js-v3 monorepo to v3.974.0 (#741) (e67b8ac)

... (truncated)

Commits

• 00a0515 chore(release): 2.3.13 [skip ci]
• 8ce1c7e chore(sync): restore package.json from main
• 5ca2738 Merge remote-tracking branch 'origin/main' into main-release
• 31208d4 Merge branch 'dev'
• 614e6fa docs: v
• 69aec4f chore(release): 2.3.12 [skip ci]
• 4fa2a44 chore(sync): restore package.json from main
• 25d485e Merge remote-tracking branch 'origin/main' into main-release
• 58c9ab7 Merge pull request #874 from rharkor/dev
• 7861008 fix: ts package
• Additional commits viewable in compare view

Updates pnpm/action-setup from 5 to 6

Release notes

Sourced from pnpm/action-setup's releases.

v6.0.0

Added support for pnpm v11.

Commits

• 08c4be7 docs(README): update action-setup version
• 5798914 chore: update .gitignore
• ddffd66 fix: remove accidentally committed file
• b43f991 fix: update pnpm to 11.0.0-rc.0
• 3852509 README.md: bring versions up-to-date (#222)
• 6e7bdbd chore: bump bootstrap pnpm to 11.0.0-beta.4-1 and add update script
• 6b87c46 fix: Windows standalone mode — bypass broken npm shims (#217)
• 994d756 feat: read pnpm version from devEngines.packageManager (#211)
• 738f428 docs: upgrade pnpm/action-setup from v4 to v5
• 62bce64 fix: extract pnpm version from packageManager field instead of returning unde...
• Additional commits viewable in compare view

Updates actions/github-script from 8 to 9

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

• getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
• Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

• require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
• getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
• If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

• Add ACTIONS_ORCHESTRATION_ID to user-agent string by @​Copilot in actions/github-script#695
• ci: use deployment: false for integration test environments by @​salmanmkc in actions/github-script#712
• feat!: add getOctokit to script context, upgrade @​actions/github v9, @​octokit/core v7, and related packages by @​salmanmkc in actions/github-script#700

New Contributors

• @​Copilot made their first contribution in actions/github-script#695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

Commits

• 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
• ca10bbd fix: use @​octokit/core/types import for v7 compatibility
• 86e48e2 merge: incorporate main branch changes
• c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
• afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
• ff8117e ci: fix user-agent test to handle orchestration ID
• 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
• 3953caf docs: update README examples from @​v8 to @​v9, add getOctokit docs and v9 brea...
• c17d55b ci: add getOctokit integration test job
• a047196 test: add getOctokit integration tests via callAsyncFunction
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[changeset-bot]

⚠️ No Changeset found

Latest commit: 16cf058

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[pkg-pr-new]

Open in StackBlitz

varlock

npm i https://pkg.pr.new/varlock@603

@varlock/astro-integration

npm i https://pkg.pr.new/@varlock/astro-integration@603

@varlock/cloudflare-integration

npm i https://pkg.pr.new/@varlock/cloudflare-integration@603

@varlock/expo-integration

npm i https://pkg.pr.new/@varlock/expo-integration@603

@varlock/nextjs-integration

npm i https://pkg.pr.new/@varlock/nextjs-integration@603

@varlock/vite-integration

npm i https://pkg.pr.new/@varlock/vite-integration@603

@varlock/1password-plugin

npm i https://pkg.pr.new/@varlock/1password-plugin@603

@varlock/aws-secrets-plugin

npm i https://pkg.pr.new/@varlock/aws-secrets-plugin@603

@varlock/azure-key-vault-plugin

npm i https://pkg.pr.new/@varlock/azure-key-vault-plugin@603

@varlock/bitwarden-plugin

npm i https://pkg.pr.new/@varlock/bitwarden-plugin@603

@varlock/dashlane-plugin

npm i https://pkg.pr.new/@varlock/dashlane-plugin@603

@varlock/google-secret-manager-plugin

npm i https://pkg.pr.new/@varlock/google-secret-manager-plugin@603

@varlock/hashicorp-vault-plugin

npm i https://pkg.pr.new/@varlock/hashicorp-vault-plugin@603

@varlock/infisical-plugin

npm i https://pkg.pr.new/@varlock/infisical-plugin@603

@varlock/keepass-plugin

npm i https://pkg.pr.new/@varlock/keepass-plugin@603

@varlock/pass-plugin

npm i https://pkg.pr.new/@varlock/pass-plugin@603

@varlock/passbolt-plugin

npm i https://pkg.pr.new/@varlock/passbolt-plugin@603

@varlock/proton-pass-plugin

npm i https://pkg.pr.new/@varlock/proton-pass-plugin@603

commit: 16cf058