ci(deps): bump ci-dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
benc-uk/workflow-dispatch	action	minor	v1.2.4 → v1.3.1
dependabot/fetch-metadata	action	minor	v2.4.0 → v2.5.0
googleapis/release-please-action	action	patch	v4.4.0 → v4.4.1
lewagon/wait-on-check-action	action	minor	v1.4.1 → v1.7.0
pnpm/action-setup	action	minor	v4.2.0 → v4.4.0

---

Release Notes

benc-uk/workflow-dispatch (benc-uk/workflow-dispatch)

v1.3.1

Compare Source

Features

• New sync-status input — when used with wait-for-completion, mirrors the triggered workflow's conclusion (failure/cancelled) back to this action's status (#​84)
• Alternate ref default for PRs — automatically uses github.head_ref when running in a pull request context, avoiding refs/pull/.../merge errors (#​79)

Bug Fixes

• Safer JSON input parsing — invalid inputs JSON now logs an error instead of throwing an unhandled exception (#​84)
• Improved timeout handling — timeout now sets a distinct timed_out status and emits a warning instead of silently breaking (#​84)
• Improved warning message formatting for workflow run timeout

Internal Changes & Chores

• Replaced console.log calls with core.info for proper Actions log integration (#​84)
• Removed stale ref/inputs parameters from the workflow list API call (#​84)
• Expanded CI test matrix from 3 sequential steps to 9 parallel test jobs covering workflow lookup, output assertions, wait-for-completion, sync-status, and error handling (#​84)
• Added CI path filters to skip docs-only changes (#​84)
• Changed echo-3 test fixture from workflow_call to workflow_dispatch with deterministic failure (#​84)
• Removed unused .vscode/settings.json (#​84)
• Added .github/copilot-instructions.md (#​84)
• General project chores

Documentation Updates

• No documentation updates in this release

v1.3.0: - It's been a long time coming...

Compare Source

What's Changed

• After 6 years GitHub finally added a way to return the run-id from the workflow_dispatch API, this means I can return the run-id and link URLs from this action 😎
• It also means the requested wait-for-completion option is now possible! 🥳 (with optional wait-timeout-seconds too)
• Mucho internal modernization, switched to esbuild, packages updated and Node v24 is the new default 👀

Merges

• 2026 refresh by @​benc-uk in #​83

Full Changelog: benc-uk/workflow-dispatch@v1.2...v1.3.0

v1.3

Compare Source

dependabot/fetch-metadata (dependabot/fetch-metadata)

v2.5.0

Compare Source

What's Changed

• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot[bot] in #​628
• Bump the dev-dependencies group with 11 updates by @​dependabot[bot] in #​629
• Bump actions/create-github-app-token from 2.0.6 to 2.1.1 by @​dependabot[bot] in #​635
• Bump actions/create-github-app-token from 2.1.1 to 2.1.4 by @​dependabot[bot] in #​638
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​636
• Bump actions/setup-node from 4 to 5 by @​dependabot[bot] in #​637
• Bump actions/setup-node from 5 to 6 by @​dependabot[bot] in #​639
• Bump actions/create-github-app-token from 2.1.4 to 2.2.0 by @​dependabot[bot] in #​643
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​642
• Bump actions/create-github-app-token from 2.2.0 to 2.2.1 by @​dependabot[bot] in #​648
• Bump js-yaml from 3.14.1 to 3.14.2 by @​dependabot[bot] in #​644
• Bump express from 5.1.0 to 5.2.1 by @​dependabot[bot] in #​645
• Bump @​modelcontextprotocol/sdk from 1.11.2 to 1.24.0 by @​dependabot[bot] in #​647
• v2.5.0 by @​fetch-metadata-action-automation[bot] in #​631

Full Changelog: dependabot/fetch-metadata@v2...v2.5.0

googleapis/release-please-action (googleapis/release-please-action)

v4.4.1

Compare Source

lewagon/wait-on-check-action (lewagon/wait-on-check-action)

v1.7.0

Compare Source

Fixed

• Fix the failure exit codes

v1.6.1

Compare Source

Added

• Pin the ruby/setup-ruby version

v1.6.0

Compare Source

Added

• Add checks-discovery-timeout option

v1.5.0

Compare Source

Added

• Add fail-on-no-checks option

Fixed

• Bump rexml to 3.4.2

pnpm/action-setup (pnpm/action-setup)

v4.4.0

Compare Source

Updated the action to use Node.js 24.

v4.3.0

Compare Source

What's Changed

• docs: fix the run_install example in the Readme by @​dreyks in #​175
• chore: remove unused @types/node-fetch dependency by @​silverwind in #​186
• Clarify that package_json_file is relative to GITHUB_WORKSPACE by @​chris-martin in #​184
• feat: store caching by @​jrmajor in #​188
• refactor: remove star imports by @​KSXGitHub in #​196
• fix(ci): exclude macos by @​KSXGitHub in #​197

New Contributors

• @​dreyks made their first contribution in #​175
• @​silverwind made their first contribution in #​186
• @​chris-martin made their first contribution in #​184
• @​jrmajor made their first contribution in #​188
• @​Boosted-Bonobo made their first contribution in #​199

Full Changelog: pnpm/action-setup@v4.2.0...v4.3.0

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • Between 10:00 AM and 10:59 AM, on day 1 of the month (* 10 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.