ci(deps): update bfra-me/.github to v4.16.31

[bfra-me]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
bfra-me/.github	action	patch	v4.16.28 → v4.16.31

---

Release Notes

bfra-me/.github (bfra-me/.github)

v4.16.31

Compare Source

Patch Changes

• Fix fro-bot workflow skipping issue_comment events on pull requests. The (#​2350)
  if condition's github.event.issue.pull_request == null clause (added during
  PR-fork hardening) filtered out @fro-bot mentions on PR conversation threads,
  because GitHub populates issue.pull_request (with the PR URL) for any comment
  on a PR. The clause has been removed; the top-level fork-hardening and
  author_association (OWNER/MEMBER/COLLABORATOR) check still gate
  untrusted triggers.

  Also add an explicit "DELIVERY CONTRACT" to the AUTOHEAL_PROMPT so future
  dispatched runs always finish with git push + gh pr create instead of
  stopping at "the caller will push" — the caller is the agent itself.

• Fix intermittent git exit 128 in the update-repo-settings reusable workflow's Filter Changed Files step on push events. The push-event checkout now uses fetch-depth: 0 so dorny/paths-filter always has the history it needs to diff against the parent commit, instead of the default shallow clone that could fail the diff. (#​2346)

• 📦 Group update for dependencies dependencies: Node.js, node (#​2339)

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.74.0 to v0.76.2 (#​2338)

• ⚙️ Update GitHub Actions workflow dependency fro-bot/agent from v0.76.2 to v0.76.3 (#​2347)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.125.1 to 9.125.2 (#​2345)

v4.16.30

Compare Source

Patch Changes

• Bump bfra-me/renovate-action to 9.125.1 (resolves bfra-me/renovate-action#3418, includes bfra-me/renovate-action#3419). (#​2336)

• 📦 Update npm dependency pnpm from 10.34.3 to 10.34.4 (#​2337)

• 🔒 Remediate undici vulnerabilities via pnpm override (>=6.27.0) addressing GHSA-vxpw-j846-p89q (HIGH/CVSS 7.5, WebSocket DoS via fragment count bypass), GHSA-p88m-4jfj-68fv (MEDIUM/CVSS 5.9, Set-Cookie header injection), GHSA-35p6-xmwp-9g52 (LOW, keep-alive socket reuse response queue poisoning), and GHSA-g8m3-5g58-fq7m (LOW, Set-Cookie SameSite downgrade) (#​2322)

v4.16.29

Compare Source

Patch Changes

• ⚠️ Update GitHub Actions workflow dependency fro-bot/agent from v0.73.0 to v0.74.0 (#​2326)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.124.0 to 9.124.1 (#​2330)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.124.1 to 9.124.2 (#​2331)

• ⚙️ Update GitHub Actions workflow dependency bfra-me/renovate-action from 9.124.2 to 9.124.3 (#​2332)

---

Configuration

📅 Schedule: (in timezone America/Phoenix)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.