ci: sync template files [skip ci]

.github/renovate.json

@@ -11,9 +11,10 @@
   ],
   "rangeStrategy": "bump",
   "ignorePaths": ["**/node_modules/**"],
-  "commitMessageSuffix": "[skip ci]",
+  "commitMessageSuffix": "[skip netlify]",
   "assignees": [],
   "reviewers": [],
+  "minimumReleaseAge": "7 days",
   "packageRules": [
     {
       "groupName": "github-actions",
@@ -30,6 +31,11 @@
       "matchPackageNames": ["pnpm"],
       "matchDepTypes": ["packageManager"],
       "enabled": false
+    },
+    {
+      "matchUpdateTypes": ["patch", "minor"],
+      "automerge": true,
+      "minimumReleaseAge": "21 days"
     }
   ]
 }

.github/workflows/format.yaml

@@ -7,7 +7,7 @@ permissions:
   contents: read
 
 env:
-  NODE_VERSION: 24.10.0
+  NODE_VERSION: 24.14.1
 
 jobs:
   autofix:
@@ -18,10 +18,10 @@ jobs:
           persist-credentials: false
 
       - name: Setup PNPM
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
+        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
 
       - name: Setup Node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: "pnpm"

.github/workflows/labeler.yaml

@@ -11,13 +11,14 @@ jobs:
     steps:
       - name: Generate GitHub App token
         id: generate_token
-        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
-          app_id: ${{ secrets.BOT_APP_ID }}
-          private_key: ${{ secrets.BOT_PRIVATE_KEY }}
+          client-id: ${{ secrets.BOT_APP_ID }}
+          private-key: ${{ secrets.BOT_PRIVATE_KEY }}
 
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          token: ${{ steps.generate_token.outputs.token }}
           persist-credentials: false
       - name: Ensure labels exist
         env:
@@ -51,7 +52,7 @@ jobs:
           gh label create "🏯 styles" --description "Stylesheets or design updates" --color "550F5A" --force
           gh label create "🔒 wontfix" --description "This will not be worked on" --color "FFFFFF" --force
 
-      - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
+      - uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # v6.1.0
         with:
           configuration-path: .github/labeler.yaml
           sync-labels: true

.github/workflows/welcome-bot.yaml

@@ -15,14 +15,16 @@ jobs:
     steps:
       - name: Generate GitHub App token
         id: generate_token
-        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
-          app_id: ${{ secrets.BOT_APP_ID }}
-          private_key: ${{ secrets.BOT_PRIVATE_KEY }}
+          client-id: ${{ secrets.BOT_APP_ID }}
+          private-key: ${{ secrets.BOT_PRIVATE_KEY }}
 
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          token: ${{ steps.generate_token.outputs.token }}
           persist-credentials: false
+
       - name: Convert Repository Name to Title Case
         id: convert_repo_name
         run: |

package.json

@@ -12,8 +12,8 @@
   "author": "trueberryless <trueberryless@gmail.com> (https://trueberryless.org)",
   "devDependencies": {
     "@trivago/prettier-plugin-sort-imports": "6.0.2",
-    "prettier": "3.8.1",
+    "prettier": "3.8.3",
     "prettier-plugin-astro": "0.14.1"
   },
-  "packageManager": "pnpm@10.10.0"
+  "packageManager": "pnpm@11.1.2"
 }