chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	pinDigest	→ df4cb1c
actions/deploy-pages	action	pinDigest	→ d6db901
actions/setup-node	action	pinDigest	→ 48b55a0
actions/upload-pages-artifact	action	pinDigest	→ 7b1f4a7
oven-sh/setup-bun	action	pinDigest	→ 0c5077e
peter-evans/create-pull-request	action	pinDigest	→ 5f6978f
pnpm/action-setup	action	pinDigest	→ b906aff
robinraju/release-downloader	action	minor	v1.12 → v1.13
wasmerio/setup-wasmer	action	pinDigest	→ 24b15c9

---

Release Notes

robinraju/release-downloader (robinraju/release-downloader)

v1.13: Release Downloader v1.13

Compare Source

What's Changed

• chore: group dependendabot updates by @​robinraju in #​905
• chore: dependency updates by @​robinraju in #​906
• Upgrade action runtime to node 24 by @​robinraju in #​907
• Await directory creation by @​DavidS-ovm in #​902
• Add workflow to check if dist directory id up to date by @​robinraju in #​908
• ci(mergify): upgrade configuration to current format by @​mergify[bot] in #​918
• Improve error reporting by @​DavidS-ovm in #​903
• Add more test coverage by @​robinraju in #​920
• Split CI into separate worflows (pr validation + main branch builds) by @​robinraju in #​921
• Build using CI and restrict commits by users by @​robinraju in #​924
• Bump @​types/node from 24.12.0 to 25.5.0 by @​dependabot[bot] in #​912
• Bump minimatch from 10.2.4 to 10.2.5 by @​dependabot[bot] in #​923
• Bump picomatch from 2.3.1 to 2.3.2 by @​dependabot[bot] in #​915
• Bump lodash from 4.17.23 to 4.18.1 by @​dependabot[bot] in #​922
• Bump tar from 7.5.12 to 7.5.13 in the npm-production group across 1 directory by @​dependabot[bot] in #​925
• Bump eslint-plugin-jest from 28.11.0 to 29.15.0 by @​dependabot[bot] in #​914
• Bump brace-expansion from 1.1.12 to 1.1.13 by @​dependabot[bot] in #​916
• Bump the npm-development group across 1 directory with 8 updates by @​dependabot[bot] in #​919
• Potential fix for code scanning alert no. 8: Workflow does not contain permissions by @​robinraju in #​926
• Bump the npm-development group with 5 updates by @​dependabot[bot] in #​928
• Bump eslint-plugin-github from 5.1.8 to 6.0.0 by @​dependabot[bot] in #​929
• Migrate to ESM by @​robinraju in #​932
• Bump @​actions/core from 1.11.1 to 3.0.0 by @​dependabot[bot] in #​913
• Bump typescript from 5.8.2 to 6.0.2 by @​dependabot[bot] in #​931
• fix #​729: Remove archive after extraction by @​Wires77 in #​792
• Specify different extract path by @​gnpaone in #​768

New Contributors

• @​DavidS-ovm made their first contribution in #​902
• @​mergify[bot] made their first contribution in #​918
• @​Wires77 made their first contribution in #​792
• @​gnpaone made their first contribution in #​768

Full Changelog: robinraju/release-downloader@v1.12...v1.13

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 2am and before 3am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cloudflare-workers-and-pages]

Deploying runtime-compat with    Cloudflare Pages

Latest commit:	db9a3cb
Status:	✅  Deploy successful!
Preview URL:	https://d81ed329.runtime-compat.pages.dev
Branch Preview URL:	https://renovate-github-actions.runtime-compat.pages.dev

View logs