chore(deps): update all major dependencies (major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
actions/cache	action	major	v5.0.5 → v6.1.0
actions/checkout	action	major	v6.0.2 → v7.0.0
codecov/codecov-action	action	major	v6.0.1 → v7.0.0
electron	pnpm.catalog.default	major	42.2.0 → 43.0.0	43.1.0
hoverkraft-tech/compose-action	action	major	v2.6.0 → v3.0.0

---

Release Notes

actions/cache (actions/cache)

v6.1.0

Compare Source

What's Changed

• Bump @​actions/cache to v6.1.0 - handle read-only cache access by @​jasongin in #​1768

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

• Update packages, migrate to ESM by @​Samirat in #​1760

Full Changelog: actions/cache@v5...v6.0.0

v6

Compare Source

v5.1.0

Compare Source

What's Changed

• Bump @​actions/cache to v5.1.0 - handle read-only cache access by @​jasongin in #​1775

Full Changelog: actions/cache@v5...v5.1.0

actions/checkout (actions/checkout)

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v7

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

codecov/codecov-action (codecov/codecov-action)

v7.0.0

Compare Source

⚠️ Due to migration issues with keybase, we are unable to update our keys under the codecovsecurity account. We have deleted the account and are using codecovsecops with the original gpg key

What's Changed

• ci: remove Enforce License Compliance workflow by @​thomasrockhu-codecov in #​1950
• chore(release): 7.0.0 by @​thomasrockhu-codecov in #​1957

Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0

v7

Compare Source

v6.0.2

Compare Source

This is a copy of the v7.0.0 release to make updates easier

What's Changed

• ci: remove Enforce License Compliance workflow by @​thomasrockhu-codecov in #​1950
• chore(release): 7.0.0 by @​thomasrockhu-codecov in #​1957

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

electron/electron (electron)

v43.0.0: electron v43.0.0

Compare Source

Release Notes for v43.0.0

Stack Upgrades

• Chromium 150.0.7871.46
  • New in 150
  • New in 149
• Node v24.147.0
  • Node 24.17.0 blog post
• V8 15.0

Breaking Changes

• File downloads will open by default in the user's Downloads folder (or Home directory if Downloads doesn't exist). #​49868
• Fix: If a nativeImage was passed an image with a color profile, its pixel values will now be normalized to SRGB. This ensures that two visually identical images after color space application will receive similar pixel values when converted to a nativeImage. #​51565
• On Linux, frameless windows now have rounded corners by default, just like on macOS and Windows. Rounded corners can be disabled on all platforms by setting roundedCorners: false on the window. #​52111
• Removed showHiddenFiles support from the dialog API on Linux. #​51880

Features

Additions

• Added Clone method to WebContents. #​49959
• Added JS stack trace to crash reports on renderer OOM. #​50043 ^{(Also in 42)}
• Added Linux support for app.getApplicationInfoForProtocol(). #​51297 ^{(Also in 42)}
• Added Notification.remove(), removeAll(), and removeGroup() static methods for macOS. #​51690 ^{(Also in 42)}
• Added Notification.getHistory() for macOS, allowing developers to restore all delivered notifications still present in Notification Center. #​50325 ^{(Also in 42)}
• Added accessibilityLabel property to MenuItem constructor options and properties for defining screen-reader-friendly labels. #​50240
• Added allowExtensions privilege to protocol.registerSchemesAsPrivileged() to enable Chrome extensions on custom protocols. #​49951 ^{(Also in 40, 41, 42)}
• Added app.configureWebAuthn() to enable the Touch ID platform authenticator for WebAuthn on macOS, and a select-webauthn-account session event for choosing between multiple discoverable credentials. #​51255 ^{(Also in 41, 42)}
• Added globalShortcut.setSuspended() and globalShortcut.isSuspended() methods to temporarily suspend and resume global shortcut handling. #​50425 ^{(Also in 42)}
• Added id and groupId options to the Notification constructor on macOS. id allows custom identifiers for notifications, and groupId visually groups notifications together in Notification Center. #​50097 ^{(Also in 42)}
• Added nv12 OSR pixel format support for professional use. #​49799
• Added view.setBackgroundBlur. #​51076
• Added webContents.copyVideoFrameAt(x, y) and webContents.saveVideoFrameAs(x, y) methods. #​48149
• Added id, groupId, and groupTitle support for Windows notifications. #​50328 ^{(Also in 42)}
• Added nativeTheme.shouldDifferentiateWithoutColor on macOS. #​49912 ^{(Also in 41, 42)}
• Added session support to net module requests from utility process. #​51279 ^{(Also in 42)}
• Added support for heap profiling via contentTracing.enableHeapProfiling(). #​50826 ^{(Also in 41, 42)}
• Added support for importing shared textures using the nv16 pixel format. #​50728 ^{(Also in 42)}
• Added support for the urgency option in Notifications on Windows. #​50225 ^{(Also in 41, 42)}
• Added support for using a proxy during yarn install. #​50322 ^{(Also in 39, 40, 41, 42)}
• Allowed the --experimental-inspector-network-resource Node.js flag to be passed through Electron. #​49689 ^{(Also in 41, 42)}
• Enabled ThinLTO on macOS builds. #​51819 ^{(Also in 42)}
• Enabled profile-guided optimization for V8 builtins in release builds, improving JavaScript builtin performance (Array, String, RegExp, etc.). #​50416 ^{(Also in 40, 41, 42)}
• Feat: SF Symbol customisation. #​48911
• Fixed contentTracing module to capture Node.js trace categories. #​50591

Improvements

• Improved app startup performance — the main process now boots from an embedded Node.js startup snapshot, framework bundles and preload scripts are cached as compiled V8 bytecode, and sandboxed renderer startup data is pushed ahead of navigation instead of fetched via blocking IPC. Preload stack traces now show the correct file path and line number. #​51792 ^{(Also in 42)}
• Improved performance of Linux and Windows release builds by enabling ThinLTO link-time optimization for the main Electron binary. #​51820 ^{(Also in 42)}
• Improved performance of app.getApplicationNameForProtocol() on Linux. #​51251 ^{(Also in 42)}
• Improved performance of app.isDefaultProtocolClient() and app.setAsDefaultProtocolClient() on Linux. #​51316 ^{(Also in 42)}
• Improved performance of webRequest header conversions and several other gin converter hot paths. #​51608 ^{(Also in 42)}
• Improved performance of native event emission, IPC dispatch, and option-dictionary parsing. #​51615 ^{(Also in 41, 42)}
• Improved runtime performance. #​51829 ^{(Also in 42)}

Fixes

• Fixed desktopCapturer.getSources() hanging on macOS. #​51128
• Fixed an issue on Linux where the system theme color appeared at the top edge of frameless windows. #​52179
• Fixed an issue where frameless windows windows could shrink after applying constraints or toggling resizability on Windows. #​51954
• Fixed an issue with the main process where process.exit() with no argument did not exit with process.exitCode
  • Fixed handling of string value arguments to process.exit() in the main process. #​51428
• Fixed desktopCapturer thumbnail generation and premature portal timeout on Linux with Wayland. #​51783
• Fixed running under tsx import transpilation. #​51978
• Fixed runtime toggling of shadows for frameless windows on Linux.
  • Added support for system-configured button layouts in Window Controls Overlay on Linux. #​51658
• Fixed titleBarOverlay.color set to rgba(0,0,0,0) failing back to default frame color. #​52010
• On Linux, apps should now display their names and icons in audio managers instead of all being labeled as Chromium. #​49270

Also in earlier versions...

• Added additional ASAR support to additional fs copy methods. #​50226 ^{(Also in 39, 40, 41, 42)}
• Added crash keys to diagnose power monitor shutdown crash on arm64 windows. #​51198 ^{(Also in 42)}
• Added missing metadata fields to contentTracing traces. #​50892 ^{(Also in 41, 42)}
• BrowserWindow now enforces min/max size constraints on window creation, even if they conflict with the requested width and height. #​49906 ^{(Also in 41, 42)}
• Changed the kResizeThreshold to trigger the resize on corners. #​50637 ^{(Also in 41, 42)}
• Ensured cross-origin fetch() and XHR are blocked for custom protocols registered with supportFetchAPI: true unless corsEnabled: true is also set; cross-origin mode: 'no-cors' requests now receive an opaque response. #​51152 ^{(Also in 39, 40, 41, 42)}
• Fixed DesktopCapturer crash on macOS. #​50960 ^{(Also in 42)}
• Fixed DevTools Network panel missing most requests after navigating when webContents.debugger is attached. #​51964 ^{(Also in 42)}
• Fixed Electron child process titles on Linux so they show their types (render, gpu, etc.) and complete command-line arguments and flags in ps aux. #​50509 ^{(Also in 42)}
• Fixed Windows edge case in NativeWindowViews::MoveBehindTaskBarIfNeeded(). #​52021 ^{(Also in 41, 42)}
• Fixed ELECTRON_INSTALL_PLATFORM being ignored when resolving the Electron executable path during postinstall, which caused path.txt to be written for the host platform instead of the requested target and made isInstalled() always re-download on subsequent installs. #​51029 ^{(Also in 42)}
• Fixed ProtocolResponse.url requests being made through the default session instead of the session the protocol handler was registered on when ProtocolResponse.session was not set. #​52131 ^{(Also in 40, 41, 42)}
• Fixed app.getLoginItemSettings() returning undefined for executableWillLaunchAtLogin on macOS; the property is now always a boolean. #​51416 ^{(Also in 40, 41, 42)}
• Fixed fs.stat on files inside asar archives returning undefined for blksize and blocks instead of numeric values. #​50825 ^{(Also in 40, 41, 42)}
• Fixed webContents.printToPDF rejecting on all subsequent calls after a prior call was rejected with an invalid pageRanges value. #​51174 ^{(Also in 40, 41, 42)}
• Fixed a crash when providing invalid HTTP header names or values in the webRequest.onBeforeSendHeaders() callback. #​51340 ^{(Also in 40, 41, 42)}
• Fixed a browser process crash when calling webContents.reload() or navigating synchronously from the render-process-gone event; the event is now emitted after the renderer's teardown notification has completed. #​51918 ^{(Also in 41, 42)}
• Fixed a bug on Linux where a 1px line appeared at the top of frameless windows if the window and web contents had different background colors. #​51999 ^{(Also in 41, 42)}
• Fixed a bug where Windows notification icons could fail to save because their temporary filenames contained invalid characters. #​50454 ^{(Also in 40, 41, 42)}
• Fixed a bug where errors would occur when using the Chrome DevTools Fetch API. #​50744 ^{(Also in 41, 42)}
• Fixed a crash in clipboard.readImage() when the clipboard contains malformed image data. #​50475 ^{(Also in 39, 40, 41, 42)}
• Fixed a crash in the macOS Touch ID WebAuthn prompt caused by a missing string resource, and added touchID.promptReason to app.configureWebAuthn() to customize the prompt text. #​51595 ^{(Also in 41, 42)}
• Fixed a crash on MacOS when a user clicked into a title bar or top view. #​51606 ^{(Also in 42)}
• Fixed a crash that could occur when an autofill suggestion popup was shown while a window was closing. #​51302 ^{(Also in 41, 42)}
• Fixed a crash when calling contentTracing.getTraceBufferUsage() while a trace session is active. #​50556 ^{(Also in 39, 40, 41, 42)}
• Fixed a crash when calling an offscreen shared texture's release() after the texture object was garbage collected. #​50473 ^{(Also in 39, 40, 41, 42)}
• Fixed a crash when rendering PDFs when Site Isolation is disabled. #​50689 ^{(Also in 41, 42)}
• Fixed a memory leak where Menu items were not cleaned up after Menu.setApplicationMenu was called repeatedly. #​50806 ^{(Also in 40, 41, 42)}
• Fixed a potential crash when using webContents.print(). #​50843 ^{(Also in 41, 42)}
• Fixed a potential race condition crash when closing DevTools. #​51420 ^{(Also in 41, 42)}
• Fixed a regression on Linux where transparent frameless windows would have visible borders. Also fixed a longstanding issue where transparent windows on Linux could show smeared and glitched content as windows moved around. #​50541 ^{(Also in 41, 42)}
• Fixed a regression on Windows where frameless windows changed their size after calling setResizable. #​51252 ^{(Also in 41, 42)}
• Fixed a regression where frameless fullscreen windows had white borders on Windows. #​51287 ^{(Also in 41, 42)}
• Fixed a renderer crash when a page uses the <geolocation> HTML element. #​51346 ^{(Also in 41, 42)}
• Fixed a renderer crash when calling WebAssembly.compileStreaming() or WebAssembly.instantiateStreaming() with nodeIntegration enabled. #​51955 ^{(Also in 42)}
• Fixed absent 'Electron Isolated Context' in the execution context dropdown in Dev Tools. #​51062 ^{(Also in 41, 42)}
• Fixed an accessibility issue where the AXMenuOpened event was not fired on menu creation. #​50377 ^{(Also in 40, 41, 42)}
• Fixed an intermittent Invoke in DisallowJavascriptExecutionScope crash on application quit when a WebContents (or other JS-emitting native object) is garbage-collected during shutdown. #​50688 ^{(Also in 40, 41, 42)}
• Fixed an issue on Linux and Windows where frameless windows would shrink when calling win.center(). Additionally, fixed an issue where frameless windows would appear slightly off-center on Windows. #​51920 ^{(Also in 41, 42)}
• Fixed an issue on Windows where a transient UnhookWindowsHookEx failure in setIgnoreMouseEvents(true, { forward: true }) teardown could cause duplicate low-level mouse hooks to be installed on the next activation. #​51098 ^{(Also in 41, 42)}
• Fixed an issue on macOS where show/hide events and WebContents visibility state could be reported incorrectly when multiple WebContentsViews were attached to a window. #​50579 ^{(Also in 40, 41, 42)}
• Fixed an issue where DevTools would re-attach to the window when opened after previously being detached. #​50807 ^{(Also in 39, 40, 41, 42)}
• Fixed an issue where app-region: drag inside a hidden WebContentsView would still drag the parent window on Windows. #​51200 ^{(Also in 40, 41, 42)}
• Fixed an issue where nodeIntegrationInWorker didn't always work in AudioWorklet. #​47244 ^{(Also in 40, 41, 42)}
• Fixed an issue where process and other Node globals were undefined in ESM preload scripts when contextIsolation was disabled. #​51723 ^{(Also in 42)}
• Fixed an issue where setSimpleFullScreen on macOS would exit when web content called requestFullscreen(). #​50874 ^{(Also in 40, 41, 42)}
• Fixed an issue where an Electron auto-update job would occasionally fail if a macOS system update is pending. #​51070 ^{(Also in 42)}
• Fixed an issue where an Electron macOS update would not be applied if another app was previously blocking the macOS system update loop. #​51191 ^{(Also in 40, 41, 42)}
• Fixed an issue where an app shortcut may lose its icon after auto-updating on Windows. #​50471 ^{(Also in 40, 41, 42)}
• Fixed an issue where calling contentTracing APIs before app.whenReady() would crash the application. #​50920 ^{(Also in 41, 42)}
• Fixed an issue where clicking the maximize button could progressively shrink the window in some Wayland environments. #​52039 ^{(Also in 42)}
• Fixed an issue where closing devtools immediately after focus caused a crash. #​47435 ^{(Also in 40, 41, 42)}
• Fixed an issue where concurrent getFileHandle requests on the same path could stall indefinitely. #​50597 ^{(Also in 40, 41, 42)}
• Fixed an issue where custom options in webContents.print() did not prefill the print dialog on macOS. #​50600 ^{(Also in 40, 41, 42)}
• Fixed an issue where importing electron via ESM would touch the OS keychain on app-ready even when safeStorage was never used. safeStorage.isAsyncEncryptionAvailable() now returns a Promise as documented. #​50419 ^{(Also in 42)}
• Fixed an issue where margins did not look as expected when printing in silent mode. #​50615 ^{(Also in 41, 42)}
• Fixed an issue where saving edited PDF files would fail with a cross-origin SecurityError. #​51042 ^{(Also in 41, 42)}
• Fixed an issue where some DevTools functionality didn't work as expected. #​50241 ^{(Also in 40, 41, 42)}
• Fixed an issue where some toast notification properties didn't work as expected in WinRT. #​51286 ^{(Also in 41, 42)}
• Fixed an issue where the "Toggle Developer Tools" menu item failed to function correctly with BaseWindow. #​51901 ^{(Also in 41, 42)}
• Fixed an issue where the Squirrel.Mac installer could resolve the target bundle path to different locations at different stages of an install. #​50745 ^{(Also in 39, 42)}
• Fixed an issue where the webContents.print() callback may not fire correctly in some cases. #​50431 ^{(Also in 41, 42)}
• Fixed an issue where webContents.print() would ignore pageSize / mediaSize when silent was true. #​50808 ^{(Also in 41, 42)}
• Fixed aspect ratio min/max size clamping to correctly account for extraSize on macOS. #​50794 ^{(Also in 40, 41, 42)}
• Fixed bug that could occasionally cause browserWindow's always-on-top-changed even to fire with incorrect values. #​51110 ^{(Also in 40, 41, 42)}
• Fixed buggy behavior where Backspace would accept macOS text replacements inside contenteditable elements. #​51289 ^{(Also in 40, 41, 42)}
• Fixed build failure when building with enable_pdf disabled. #​51223 ^{(Also in 41, 42)}
• Fixed certain DevTools extension panels not showing without a page reload. #​50611 ^{(Also in 42)}
• Fixed crash for Notification close. #​51655 ^{(Also in 41, 42)}
• Fixed crash when app.setPath('sessionData') was called with a non-existent directory. #​50891 ^{(Also in 41, 42)}
• Fixed crash when handling JavaScript dialogs from windows opened with invalid or empty URLs. #​50062 ^{(Also in 39, 40, 41, 42)}
• Fixed cross-origin isolation failing for non-file origins. #​50789 ^{(Also in 41, 42)}
• Fixed frameless transparent windows on Windows losing their transparency after setResizable(false) followed by setResizable(true). #​51175 ^{(Also in 41, 42)}
• Fixed improper focus tracking in BaseWindow on MacOS. #​49460 ^{(Also in 39, 40, 41, 42)}
• Fixed logic bug that rendered certain window types un-resizable on MAS builds. #​50096 ^{(Also in 40, 41, 42)}
• Fixed native addon compilation failure with undefined msvc intrinsic from v8 headers. #​51705 ^{(Also in 42)}
• Fixed native notification clicks not focusing the application window on Wayland. #​50568 ^{(Also in 42)}
• Fixed printing on Linux failing with "Invalid printer settings". #​50430 ^{(Also in 41, 42)}
• Fixed remote debugging via --remote-debugging-port not working when inspecting from Chrome's chrome://inspect page. The DevTools page would appear empty due to the frontend URL pointing to a CDN that returned 404 for Electron's Chromium builds. #​51236 ^{(Also in 41)}
• Fixed resize hit targets for frameless windows on Windows. Resize targets now start at the side and bottom edges of the window and extend outward when frame: false, matching the behavior for windows with frames. #​50706 ^{(Also in 41, 42)}
• Fixed sandboxed preload scripts running a stale cached version after the script was modified without its file size changing. #​51932 ^{(Also in 42)}
• Fixed shutdown crash on windows when power monitor notifications were subscribed. #​50878 ^{(Also in 42)}
• Fixed test scaffolding bug when running tests locally on Linux. #​51129 ^{(Also in 40, 41, 42)}
• Fixed the appearance of maximized windows on GNOME in Wayland, especially when non-default GTK themes like Breeze are set. #​50550 ^{(Also in 41, 42)}
• Fixed the context menu in a detached DevTools window focusing the inspected page's window instead of the DevTools window. #​51863 ^{(Also in 42)}
• Fixed the crash keys being lost and the crash reporter hanging on macOS when many dynamic crash keys were registered. #​50795 ^{(Also in 40, 41, 42)}
• Fixed user resizing of transparent windows on win32 platform. #​49428 ^{(Also in 39, 40, 41, 42)}
• Fixed utilityProcess exit event reporting incorrect exit codes on Windows when the exit code has the high bit. #​50256 ^{(Also in 40, 41, 42)}
• Fixed window freeze when failing to enter/exit fullscreen on macOS. #​49421 ^{(Also in 39, 40, 41, 42)}
• Improved external resize band positioning and scaling for frameless windows on Windows. #​51552 ^{(Also in 41, 42)}
• Improved the way Electron determines the default XDG App ID and WM_CLASS on Linux for better platform compatibility if desktopName is not provided in package.json. #​51424 ^{(Also in 41, 42)}
• Made "reload" menu items work with BaseWindow. #​52119 ^{(Also in 41, 42)}
• Moved Electron-specific help menu links to the default app only; unpackaged apps will no longer see these items in their default menu. #​50629 ^{(Also in 40, 41, 42)}
• Removed "representedObject is not a WeakPtrToElectronMenuModelAsNSObject" logging when interacting with macOS menus. #​50608 ^{(Also in 41, 42)}
• Removed support for the ELECTRON_SKIP_BINARY_DOWNLOAD environment variable. #​50406 ^{(Also in 42)}
• This PR fixes a regression in silent printing where custom DPI values from webContents.print were not honored, causing incorrect output scaling in real-world print flows. #​51046 ^{(Also in 41, 42)}
• Windows opened from links inside a sandboxed iframe now inherit the iframe's sandbox restrictions unless allow-popups-to-escape-sandbox is set. #​52189 ^{(Also in 42)}

Other Changes

• Backported fixes from upstream Chromium. #​52116
• Backported fixes from upstream Chromium. #​52168
• Fixed gn gen failing to resolve electron_version when building from a git worktree checkout. #​51146 ^{(Also in 39, 40, 41, 42)}
• Fixed silent data truncation in Buffer/TextEncoder APIs and a crash in fs.writeFileSync with non-ASCII strings on Apple Silicon. #​51850 ^{(Also in 41, 42)}

Documentation

• Documentation change
  • #​49379
  • #​50364
  • #​51689
  • #​51926

Notices

Support for 32-bit platforms ending

Electron 43.x.y will be the last version series of Electron to ship with prebuilt binaries for 32-bit platforms: Windows x86 (win32-ia32) and Linux ARM (linux-armv7l). Once the v43 series reaches end of life in January 2027, these 32-bit platforms will no longer be supported.

End of Support for 40.x.y

Electron 40.x.y has reached end-of-support as per the project's support policy. Developers

✂ Note

PR body was truncated to here.

[semanticdiff-com]

Review changes with  

Changed Files

File	Status
pnpm-workspace.yaml	40% smaller
.github/actions/upload-reports/action.yaml	17% smaller
pnpm-lock.yaml	7% smaller
.github/actions/setup-docker/action.yaml	0% smaller
.github/actions/setup-native/action.yaml	0% smaller
.github/actions/setup/action.yaml	0% smaller
.github/workflows/regular.yaml	0% smaller
.github/workflows/release.yaml	0% smaller

[greptile-apps]

Greptile Summary

Updates hoverkraft-tech/compose-action from v2.6.0 to v3.0.0 in the Docker setup composite action. The only breaking change in v3 is that the action now runs on Node 24 instead of Node 20; all public inputs and outputs remain the same.

• The action reference is correctly pinned to the new full commit SHA (11beaa1c2dae4e8ed7b1665aa074723b6cecb0e4) with an inline version comment, consistent with the repo's pinning convention.
• The compose-file and up-flags inputs used in this repo are unchanged across the major version boundary, so no usage-side adjustments are needed.

Confidence Score: 5/5

Safe to merge — the update swaps one commit SHA for another with no interface changes, and the only internal difference is a Node runtime upgrade inside the action itself.

The change is a single-line SHA bump. The v3 release notes confirm there are no API-level changes: compose-file, up-flags, and env inputs all work identically. The new commit hash is properly verified against the v3.0.0 tag.

No files require special attention.

Important Files Changed

Filename	Overview
.github/actions/setup-docker/action.yaml	Bumps hoverkraft-tech/compose-action from v2.6.0 to v3.0.0, pinned to the new commit hash; inputs and usage are unchanged.

_{Reviews (1): Last reviewed commit: "chore(deps): update all major dependenci..." | Re-trigger Greptile}

[codspeed-hq]

Merging this PR will not alter performance

✅ 15 untouched benchmarks

---

_{Comparing renovate/major-all-major-dependencies (8ae5e9e) with main (32fd41a)}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​electron@​43.0.0

View full report