chore(deps): bump fastify/github-action-merge-dependabot from 3.11.1 to 3.11.2 (#835)

Bumps
[fastify/github-action-merge-dependabot](https://github.com/fastify/github-action-merge-dependabot)
from 3.11.1 to 3.11.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastify/github-action-merge-dependabot/releases">fastify/github-action-merge-dependabot's
releases</a>.</em></p>
<blockquote>
<h2>v3.11.2</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps-dev): bump eslint from 9.21.0 to 9.23.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/696">fastify/github-action-merge-dependabot#696</a></li>
<li>ci: set workflow permissions to read-only by default by <a
href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/693">fastify/github-action-merge-dependabot#693</a></li>
<li>chore(deps-dev): bump eslint from 9.23.0 to 9.25.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/698">fastify/github-action-merge-dependabot#698</a></li>
<li>ci(ci): ignore scripts by <a
href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/700">fastify/github-action-merge-dependabot#700</a></li>
<li>chore(deps-dev): bump eslint from 9.25.1 to 9.28.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/702">fastify/github-action-merge-dependabot#702</a></li>
<li>ci: pin third-party actions to commit-hash by <a
href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/704">fastify/github-action-merge-dependabot#704</a></li>
<li>chore(deps): bump actions-toolkit from <code>5658fc8</code> to
<code>217d527</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/703">fastify/github-action-merge-dependabot#703</a></li>
<li>chore(deps-dev): bump sinon from 19.0.2 to 20.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/695">fastify/github-action-merge-dependabot#695</a></li>
<li>chore(license): update date ranges; standardise style by <a
href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/705">fastify/github-action-merge-dependabot#705</a></li>
<li>chore(deps): bump nearform-actions/optic-release-automation-action
from 4.10.2 to 4.11.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/706">fastify/github-action-merge-dependabot#706</a></li>
<li>chore(deps-dev): bump eslint from 9.28.0 to 9.30.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/707">fastify/github-action-merge-dependabot#707</a></li>
<li>chore(deps): bump nearform-actions/optic-release-automation-action
from 4.11.0 to 4.11.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/709">fastify/github-action-merge-dependabot#709</a></li>
<li>chore(deps-dev): bump eslint from 9.30.0 to 9.32.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/710">fastify/github-action-merge-dependabot#710</a></li>
<li>chore(deps-dev): bump neostandard from 0.12.1 to 0.12.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/711">fastify/github-action-merge-dependabot#711</a></li>
<li>chore(deps): bump nearform-actions/optic-release-automation-action
from 4.11.2 to 4.12.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/712">fastify/github-action-merge-dependabot#712</a></li>
<li>chore(deps-dev): bump eslint from 9.32.0 to 9.34.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/714">fastify/github-action-merge-dependabot#714</a></li>
<li>chore(deps): bump actions/checkout from 4 to 5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/715">fastify/github-action-merge-dependabot#715</a></li>
<li>chore(deps): bump actions-toolkit from <code>4c03cb1</code> to
<code>159d51c</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/713">fastify/github-action-merge-dependabot#713</a></li>
<li>chore: add <code>.npmrc</code> file by <a
href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/716">fastify/github-action-merge-dependabot#716</a></li>
<li>ci(ci): remove git credentials after checkout by <a
href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/717">fastify/github-action-merge-dependabot#717</a></li>
<li>chore(deps): bump nearform-actions/optic-release-automation-action
from 4.12.0 to 4.12.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/720">fastify/github-action-merge-dependabot#720</a></li>
<li>chore(deps-dev): bump eslint from 9.34.0 to 9.36.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/723">fastify/github-action-merge-dependabot#723</a></li>
<li>chore(deps-dev): bump <code>@​vercel/ncc</code> from 0.38.3 to
0.38.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/724">fastify/github-action-merge-dependabot#724</a></li>
<li>refactor(action): avoid code injection by <a
href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/718">fastify/github-action-merge-dependabot#718</a></li>
<li>chore(deps): bump actions/github-script from 7 to 8 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/722">fastify/github-action-merge-dependabot#722</a></li>
<li>chore(deps): bump actions-toolkit from <code>159d51c</code> to
<code>b061968</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/725">fastify/github-action-merge-dependabot#725</a></li>
<li>chore(deps): bump actions/setup-node from 4 to 5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/pull/721">fastify/github-action-merge-dependabot#721</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/github-action-merge-dependabot/compare/v3.11.1...v3.11.2">https://github.com/fastify/github-action-merge-dependabot/compare/v3.11.1...v3.11.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fastify/github-action-merge-dependabot/commit/1b2ed42db8f9d81a46bac83adedfc03eb5149dff"><code>1b2ed42</code></a>
Release v3.11.2 (<a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/issues/726">#726</a>)</li>
<li><a
href="https://github.com/fastify/github-action-merge-dependabot/commit/374443a733b04290a8d42dfd1bf5171f60664268"><code>374443a</code></a>
chore(deps): bump actions/setup-node from 4 to 5 (<a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/issues/721">#721</a>)</li>
<li><a
href="https://github.com/fastify/github-action-merge-dependabot/commit/196a13c6fafa6416f926881fa0116ffc5682eccf"><code>196a13c</code></a>
chore(deps): bump actions-toolkit from <code>159d51c</code> to
<code>b061968</code> (<a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/issues/725">#725</a>)</li>
<li><a
href="https://github.com/fastify/github-action-merge-dependabot/commit/a62875d22c85e8b17b7b4b5f9b50d5d9b62b773d"><code>a62875d</code></a>
chore(deps): bump actions/github-script from 7 to 8 (<a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/issues/722">#722</a>)</li>
<li><a
href="https://github.com/fastify/github-action-merge-dependabot/commit/fab3ec1f19af41858d2550c517c4ba5b9d934601"><code>fab3ec1</code></a>
refactor(action): avoid code injection (<a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/issues/718">#718</a>)</li>
<li><a
href="https://github.com/fastify/github-action-merge-dependabot/commit/f41cfbc268df4af83cb4d2904f16a8997827e00f"><code>f41cfbc</code></a>
chore(deps-dev): bump <code>@​vercel/ncc</code> from 0.38.3 to 0.38.4
(<a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/issues/724">#724</a>)</li>
<li><a
href="https://github.com/fastify/github-action-merge-dependabot/commit/775e10c4c02b436eaa8854d46d812524ab62fd2d"><code>775e10c</code></a>
chore(deps-dev): bump eslint from 9.34.0 to 9.36.0 (<a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/issues/723">#723</a>)</li>
<li><a
href="https://github.com/fastify/github-action-merge-dependabot/commit/abc02fdbd93b67d6a94091f485b060809ffd2941"><code>abc02fd</code></a>
chore(deps): bump nearform-actions/optic-release-automation-action (<a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/issues/720">#720</a>)</li>
<li><a
href="https://github.com/fastify/github-action-merge-dependabot/commit/de0cbdf7a7a7ef4b15ed1f232244125083ab86dd"><code>de0cbdf</code></a>
ci(ci): remove git credentials after checkout (<a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/issues/717">#717</a>)</li>
<li><a
href="https://github.com/fastify/github-action-merge-dependabot/commit/e1916b4ae5863de03440002b9b5c073b590d4d7c"><code>e1916b4</code></a>
chore: add <code>.npmrc</code> file (<a
href="https://redirect.github.com/fastify/github-action-merge-dependabot/issues/716">#716</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/fastify/github-action-merge-dependabot/compare/v3.11.1...v3.11.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fastify/github-action-merge-dependabot&package-manager=github_actions&previous-version=3.11.1&new-version=3.11.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/build-and-test.yml

@@ -17,7 +17,7 @@ jobs:
       contents: write
 
     steps:
-      - uses: fastify/[email protected].1
+      - uses: fastify/[email protected].2
         with:
           use-github-auto-merge: true