Bump @github/local-action from 2.1.3 to 3.1.3

[dependabot]

Bumps @github/local-action from 2.1.3 to 3.1.3.

Release notes

Sourced from @​github/local-action's releases.

v3.1.3

Full Changelog: github/local-action@v3.1.2...v3.1.3

v3.1.2

What's Changed

• Conditionally stub libraries by @​ncalteen in github/local-action#170
• Build(deps-dev): Bump @​babel/helpers from 7.26.0 to 7.27.0 in the npm_and_yarn group by @​dependabot in github/local-action#171
• Set path for CJS actions on Windows by @​ncalteen in github/local-action#172

Full Changelog: github/local-action@v3.1.1...v3.1.2

v3.1.1

What's Changed

• Fix check for package.json path by @​ncalteen in github/local-action#167

Full Changelog: github/local-action@v3.1.0...v3.1.1

v3.1.0

What's Changed

• Updated support for pnmp and yarn by @​ncalteen in github/local-action#164

Full Changelog: github/local-action@v3.0...v3.1.0

v3.0.5

Full Changelog: github/local-action@v3.0.4...v3.0.5

v3.0.4

Full Changelog: github/local-action@v3.0.3...v3.0.4

v3.0.3

Full Changelog: github/local-action@v3.0.2...v3.0.3

v3.0.2

Full Changelog: github/local-action@v3.0.1...v3.0.2

v3.0.1

What's Changed

• Build(deps-dev): Bump the npm-development group across 1 directory with 9 updates by @​dependabot in github/local-action#161
• Build(deps): Bump typescript from 5.7.3 to 5.8.2 by @​dependabot in github/local-action#159
• Fix invalid variable reference by @​ncalteen in github/local-action#163

Full Changelog: github/local-action@v3.0.0...v3.0.1

v3.0.0

What's Changed

• Add experimental support for pnpm and yarn by @​ncalteen in github/local-action#160

... (truncated)

Changelog

Sourced from @​github/local-action's changelog.

Changelog

v3

This version adds experimental support for pnpm and yarn.

Depending on the package manager and version, the invocation of the tsx command that drives @github/local-action is invoked differently.

Package Manager	Version	Command
npm	Any	npm exec
pnpm	Any	pnpm dlx
yarn	<= 3	yarn exec
yarn	>= 4	yarn dlx

Alongside this, yarn PnP support is implemented via unplugging any modules stubbed by @github/local-action and "re-plugging" after completion of the action run.

This support is still a work in progress. Any feedback or issues are welcome!

v2

As of version 2.0.0, the local-action tool has been updated to require Node.js v20.6.0 or higher. This is necessary to support ESM loaders to override dependencies in the GitHub Actions Toolkit.

v1

With the release of v1.0.0, there was a need to switch from ts-node to tsx. However, the bundled version of tsx is being used, so you should no longer need to install either 😀

Commits

• 02ac4e0 Bump version
• 8f13ccd Set path for CJS actions on Windows (#172)
• a5f34f1 Set path for CJS actions
• 8d2a995 Build(deps-dev): Bump @​babel/helpers from 7.26.0 to 7.27.0 in the npm_and_yar...
• 9704d1f Build(deps-dev): Bump @​babel/helpers in the npm_and_yarn group
• 3b50e13 Conditionally stub libraries (#170)
• 77e183f Remove fallback
• 3294f7a Conditionally stub libraries
• 74eb576 Fix check for package.json path (#167)
• 0738087 Fix check for package.json path
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	8		0	0	0.07s
✅ JSON	jsonlint	7		0	0	0.52s
✅ JSON	npm-package-json-lint	yes		no	no	0.54s
✅ JSON	prettier	7		0	0	1.12s
✅ MARKDOWN	markdownlint	1		0	0	0.91s
✅ REPOSITORY	checkov	yes		no	no	27.36s
✅ REPOSITORY	gitleaks	yes		no	no	0.53s
✅ REPOSITORY	git_diff	yes		no	no	0.07s
✅ REPOSITORY	grype	yes		no	no	44.12s
✅ REPOSITORY	syft	yes		no	no	11.04s
❌ REPOSITORY	trivy	yes		1	no	14.78s
✅ REPOSITORY	trivy-sbom	yes		no	no	1.34s
✅ REPOSITORY	trufflehog	yes		no	no	30.38s
✅ TYPESCRIPT	eslint	24		0	0	8.71s
✅ TYPESCRIPT	prettier	24		0	0	2.04s
✅ YAML	prettier	16		0	0	1.05s
✅ YAML	yamllint	16		0	0	0.52s

See detailed report in MegaLinter reports