Chore(deps): bump the github-actions group with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates: pullfrog/pullfrog and oasdiff/oasdiff-action/breaking.

Updates pullfrog/pullfrog from 0.1.84 to 0.1.95

Release notes

Sourced from pullfrog/pullfrog's releases.

v0.1.95

📦 pullfrog 0.1.95

Usage in GitHub Actions

- uses: pullfrog/pullfrog@v0

Installation via npm

npm install pullfrog@0.1.95

v0.1.94

📦 pullfrog 0.1.94

Usage in GitHub Actions

- uses: pullfrog/pullfrog@v0

Installation via npm

npm install pullfrog@0.1.94

v0.1.93

📦 pullfrog 0.1.93

Usage in GitHub Actions

- uses: pullfrog/pullfrog@v0

Installation via npm

npm install pullfrog@0.1.93

v0.1.92

📦 pullfrog 0.1.92

Usage in GitHub Actions

... (truncated)

Commits

• ed80001 release: bump action to 0.1.95
• 7f4b9db models: add Zen's free Fledge Alpha preview (#1455)
• 6b4899a Upgrade yes to 0.1.0 (#1454)
• d287f81 no-key error: name a subscription the runner could not install (#1452)
• 65d77ef Review prompt: file behavior defects inline, keep Nitpicks for what has no ru...
• f8c4832 release: bump action to 0.1.94
• 84a2302 bootstrap: retry a release npm lists but does not serve yet (#1451)
• a3352e7 biome: ignore nested .frizz/.fray dirs, matching .gitignore
• 90ec2be Replace the vendored yes with the npm package yes@0.0.3 (#1450)
• a4fef3e credential pool: a subscription pays before any API key, whatever its scope (...
• Additional commits viewable in compare view

Updates oasdiff/oasdiff-action/breaking from 0.1.17 to 0.1.18

Release notes

Sourced from oasdiff/oasdiff-action/breaking's releases.

v0.1.18

oasdiff v1.33.0: recursive schemas, fast and deterministic

Every action now runs oasdiff v1.33.0, which reworks how recursive schemas are compared. A workflow on a spec whose schemas reference each other in cycles no longer runs until the job times out, with or without flatten-allof, and the structured diff of such a spec is the same on every run.

Two consequences when you upgrade: a change inside a recursive schema is now reported once per entry into the cycle rather than once for every path through it, so those comparisons produce far fewer annotations; and the circularRef field is gone again from diff json/yaml output, where cyclic mismatches now appear as ordinary field-level diffs.

No changes to the actions themselves. oasdiff/oasdiff-action/*@v0 now points at this release.

Commits

• b9325c9 Merge pull request #207 from oasdiff/bump/oasdiff-v1.33.0
• d68100f bump: oasdiff v1.33.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[thomasluizon]

@pullfrog review

[pullfrog]

✅ No new issues found.

Reviewed changes Reviewed both workflow dependency updates against their upstream action definitions and the existing workflow configuration.

• Pullfrog: Updates both primary and fallback action pins from 0.1.84 to 0.1.95; the configured inputs, Node runtime, and child-exit propagation remain compatible, with bootstrap retries added for temporarily unavailable npm releases.
• OpenAPI gate: Updates oasdiff-action/breaking from 0.1.17 to 0.1.18, moving the underlying engine to oasdiff v1.33.0; the action interface is unchanged, and the workflow does not consume the removed circularRef output field.

Existing PR checks passed, including Build, Unit Tests, and OpenAPI Breaking-Change Gate. No local build or tests were rerun for this workflow-only change.

  ^{｜ View workflow run ｜ Using gpt-6.1-sol ｜ 𝕏}