chore(deps): update bfra-me/.github to v4.13.6

[fro-bot]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
bfra-me/.github	action	minor	v4.4.0 → v4.13.6

---

Release Notes

bfra-me/.github (bfra-me/.github)

v4.13.6

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.8.0 to 9.9.0 (#​1855)

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.30.10 to v0.31.1 (#​1861)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.9.0 to 9.10.0 (#​1857)

v4.13.5

Compare Source

Patch Changes

• 📦 Update GitHub Actions workflow dependencies: update-repository-settings, bfra-me/.github (#​1852)

v4.13.4

Compare Source

Patch Changes

• Migrate deprecated contexts field to checks in branch protection (#​1836)

  The contexts field in branch protection settings is deprecated. This change
  migrates to the newer checks format using the context property.

  • Update .github/settings.yml to use checks format
  • Maintain all existing status check requirements
  • Fixes GitHub API deprecation warning

  refs: https://docs.github.com/en/rest/branches/branch-protection#update-branch-protection

• ⚙️ Update GitHub Actions workflow dependency kentaro-m/auto-assign-action from v2.0.1 to v2.0.2 (#​1841)

• 📦 Group update for npm dependencies: @vitest/coverage-v8, vitest (#​1762)

• ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.34.0 to 4.34.1 (#​1845)

• ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.33.0 to 4.34.0 (#​1842)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.6.1 to 9.7.0 (#​1838)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.6.0 to 9.6.1 (#​1834)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.7.0 to 9.8.0 (#​1840)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.5.0 to 9.6.0 (#​1832)

v4.13.3

Compare Source

Patch Changes

• Skip changeset generation for auto-pin SHA update PRs to prevent recursive release cycles (#​1828)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.4.0 to 9.5.0 (#​1830)

• 📋 Update github-actions dependency internal (#​1827)

v4.13.2

Compare Source

Patch Changes

• 📋 Update github-actions dependency bfra-me/.github from 4.12.1 to 4.13.0 (#​1821)

• ⚠️ Update GitHub Actions workflow dependency bfra-me/renovate-action to v9 (9.4.0) (#​1770)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.30.9 to v0.30.10 (#​1823)

v4.13.1

Compare Source

Patch Changes

• 📦 Update GitHub Actions workflow dependencies: renovate-changesets, bfra-me/.github (#​1820)

v4.13.0

Compare Source

Minor Changes

• 📋 Update github-actions dependency bfra-me/.github from 4.11.0 to 4.12.1 (#​1807)

Patch Changes

• Auto-update internal action SHA pins during release (#​1815)

  • When renovate-changesets or update-repository-settings is released, automatically update the SHA pin and version comment in the corresponding workflow file
  • Eliminates the Renovate follow-up PR that previously updated the SHA pin, which generated an unnecessary patch changeset and extra release cycle

• ⚠️ Update GitHub Actions workflow dependency pnpm/action-setup to v5 (5.0.0) (#​1816)

• 📦 Update GitHub Actions workflow dependencies: renovate-changesets to v0.2.25 (#​1810)

v4.12.1

Compare Source

Patch Changes

• 📦 Update GitHub Actions workflow dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1806)

v4.12.0

Compare Source

Minor Changes

• 📋 Update github-actions dependency bfra-me/.github from 4.10.2 to 4.11.0 (#​1802)

Patch Changes

• 📦 Update GitHub Actions workflow dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1801)

v4.11.0

Compare Source

Minor Changes

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from 1e9e22259351e5266d65021b5b2a35a98da63d89 to 442fe99e017c4779b3d122ba42a297c39008b86b (#​1799)

Patch Changes

• 📋 Update github-actions dependency bfra-me/.github from 4.10.1 to 4.10.2 (#​1796)

v4.10.2

Compare Source

Patch Changes

• 🔒 Security update for GitHub Actions dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1794)

• 🔒 Security update for github-actions dependency bfra-me/.github from 4.10.0 to 4.10.1 (#​1793)

v4.10.1

Compare Source

Patch Changes

• 🔒 Security update for github-actions dependency bfra-me/.github from 4.9.0 to 4.10.0 (#​1788)

v4.10.0

Compare Source

Minor Changes

• 🔒 Security update for GitHub Actions dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1784)

Patch Changes

• 🔒 Security update for github-actions dependency bfra-me/.github from 4.8.1 to 4.9.0 (#​1785)

v4.9.0

Compare Source

Minor Changes

• 📦 Update GitHub Actions workflow dependencies: renovate-changesets, bfra-me/.github, bfra-me/.github/.github/actions/renovate-changesets (#​1780)

Patch Changes

• 📋 Update dependencies dependency bfra-me/.github from 4.8.0 to 4.8.1 (#​1779)

v4.8.1

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency github/codeql-action from 4.32.6 to 4.33.0 (#​1768)

• 📦 Update npm dependency pnpm (#​1767)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from 0.30.6 to 0.30.8 (#​1757)

• 📦 Update npm dependency lint-staged from 16.3.4 to 16.4.0 (#​1778)

• 📦 Update npm dependency lint-staged from 16.3.3 to 16.3.4 (#​1777)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 8.87.7 to 8.87.8 (#​1766)

• 📦 Update 6 GitHub Actions workflow dependencies (#​1769)

• 📦 Update 10 GitHub Actions workflow dependencies (#​1764)

v4.8.0

Compare Source

Minor Changes

• ⚠️ Update GitHub Actions workflow dependency action (#​1754)

Patch Changes

• 📦 Update npm dependency @types/node from 24.10.14 to 24.12.0 (#​1760)

v4.7.0

Compare Source

Minor Changes

• ⚠️ Update GitHub Actions workflow dependency actions/create-github-app-token from 2.2.2 to 3.0.0 (#​1751)

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency bfra-me/.github from 0.1.1 to 0.1.2 (#​1745)

• ⚙️ Update GitHub Actions workflow dependency dorny/paths-filter from 4.0.0 to 4.0.1 (#​1752)

• 📦 Group update for npm dependencies: pnpm, Age (#​1750)

• Add commitMessageTopic to Renovate config for action path visibility in PRs and changesets (#​1748)

  Configure commitMessageTopic for renovate-changesets and update-repository-settings actions
  so that Renovate PRs and changesets clearly identify the specific action being updated instead of
  only showing the repository name (bfra-me/.github).

  Before: chore(deps): update bfra-me/.github to v0.1.2
  After: chore(deps): update action update-repository-settings to v0.1.2

  Also update the renovate-changesets action parser to correctly extract the action name from PR
  titles that include the update action <name> phrase (produced by commitMessageTopic).

v4.6.0

Compare Source

Minor Changes

• ⚠️ Update github-actions dependencies: dorny/paths-filter (#​1731)

Patch Changes

• Add conditional to skip checkout on non-push events. (#​1744)

• ⚙️ Update github-actions dependencies: bfra-me/.github (#​1742)

v4.5.5

Compare Source

Patch Changes

• 📦 Update github-actions dependencies: actions/create-github-app-token, minimatch, undici and 8 more (#​1740)

• 📋 Update unknown dependencies: bfra-me/.github (#​1736)

v4.5.4

Compare Source

Patch Changes

• Fix renovate-changesets parsing for GitHub Actions updates so summaries use the correct manager, (#​1732)
  dependency names, and version details for action updates like dorny/paths-filter.

v4.5.3

Compare Source

Patch Changes

• Fix Renovate-generated changeset dependency summaries for single-dependency and digest update PRs. (#​1723)

• Fix Renovate config for internal actions: use correct depName (bfra-me/.github), explicitly disable digest update type to stop recursive self-referencing PRs, and change version comments to bare semver so Renovate can parse currentValue for release-based version tracking. (#​1727)

• Fix version extraction for internal actions by using matchDepNames instead of matchPackageNames in renovate.json5. For GitHub Actions with subdirectory paths, depName includes the full path (e.g., bfra-me/.github/.github/actions/renovate-changesets), while matchPackageNames only matches the normalized owner/repo format. (#​1721)

• 📋 Update github-actions dependencies: bfra-me/.github (#​1728)

• 📋 Update github-actions dependencies: bfra-me/.github (#​1726)

• 📦 Update bfra-me/.github action digests (renovate-changesets, update-repository-settings) (#​1724)

v4.5.2

Compare Source

Patch Changes

• ⚙️ Update GitHub Actions workflow dependency pnpm/action-setup from v4.3.0 to v4.4.0 (#​1715)

• 📋 Update unknown dependencies: github-actions-dependencies (#​1710)

• 📦 Update dependency bfra-me/renovate-action to 8.87.6 (#​1714)

• Avoid recursive self-action update PRs. (#​1717)

v4.5.1

Compare Source

Patch Changes

• Use local action reference instead of pinned remote action in renovate-changeset workflow (#​1708)

  This prevents Renovate from creating PRs on every push to main in the .github repo.
  The workflow now uses ./.github/actions/renovate-changesets (local path) instead of
  bfra-me/.github/.github/actions/renovate-changesets@<sha>.

• Migrate deprecated contexts field to checks in common-settings.yaml branch protection settings (#​1698)

• Update bfra-me/.github action digest to 49859f7 (#​1707)

• Update bfra-me/.github action digest to c33c84c (#​1703)

• Update bfra-me/.github action digest to b1670c0 (#​1706)

• Update dependency lint-staged to 16.3.3 (#​1693)

• Update bfra-me/.github action digest to 61be6f0 (#​1704)

• Update bfra-me/.github action digest to d6bbf90 (#​1701)

• Update bfra-me/.github action digest to 16aab9f (#​1709)

v4.5.0

Compare Source

Minor Changes

• Add update-repository-settings action replacing elstudio/actions-settings with direct Octokit API calls. Fixes TypeError: this.topics.split is not a function when repository.topics is a YAML array. (#​1675)

Patch Changes

• Fix 422 error in update-repository-settings action when applying branch protection by sanitizing GET response shape before PUT. (#​1679)

• Updated GitHub Actions dependencies. (#​1687)

• Updated dependency packageManager to pnpm@10.32.0. (#​1686)

• Pin changesets/action to SHA e87c8ed # v1.7.0 in auto-release.yaml (#​1680)

---

Configuration

📅 Schedule: Branch creation - "" in timezone America/Phoenix, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.