chore(deps): bump ExodusMovement/actions from 06f077a9081a1e973586dde8870e7116873b9b84 to 9c4a20d008b67694f86833c3790dc240b11dee09

[dependabot]

Bumps ExodusMovement/actions from 06f077a9081a1e973586dde8870e7116873b9b84 to 9c4a20d008b67694f86833c3790dc240b11dee09.

Commits

• 9c4a20d fix(setup/lerna): use latest setup/yarn-berry (#16)
• 80a106a fix: registry authentication (#14)
• f6b162d feat(setup-lerna): use latest yarn berry setup action (#13)
• daef8a0 feat: dependency-review action (#12)
• aff809a feat: improve caching (#10)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[mvayngrib]

@sparten11740 looks like something broke, it fails to install the private @exodus/lerna-utils package 🤔. Is this cause we changed the setup action?

[sparten11740]

no, this is because we don't have a dependabot secret here to install private dependencies, but we're using @exodus/lerna-utils here

[sparten11740]

weird it doesn't fail on the others. The passed token is empty:

Run yarn config set --home 'npmRegistries["//registry.npmjs.org/"].npmAuthToken' ""

On the other PRs it reads *** (the obfuscated token)

Run yarn config set --home 'npmRegistries["//registry.npmjs.org/"].npmAuthToken' "***"

[mvayngrib]

do we need to add an npm-token input? already have it

[mvayngrib]

doesn't seem to be passing along that input 🤔

Run ExodusMovement/actions/setup/lerna@9c4a20d008b67694f86833c3790dc240b11dee09
  with:
    disable-nx-cache: no
    nx-cache-path: .cache/nx

[sparten11740]

doesn't seem to be passing along that input

I think it's just not listed because the token is empty. We do use this version of the action in hydra and it works without issues. What's throwing me off is that it works in the other PRs 🤔

[dependabot]

Superseded by #70.