build: update all non-major dependencies (#3005)

See associated pull request for more information.

PR Close #3005

Author: angular-robot

.github/local-actions/branch-manager/main.js

@@ -2,7 +2,7 @@
   "name": "ng-renovate",
   "type": "commonjs",
   "dependencies": {
-    "renovate": "41.84.0"
+    "renovate": "41.87.3"
   },
   "pnpm": {
     "onlyBuiltDependencies": [

.github/local-actions/labels-sync/main.js

@@ -37,9 +37,7 @@ jobs:
       # - name: Confirm code builds with typescript as expected
       #   run: pnpm tsc -p tsconfig.json
       - name: Check Package Licenses
-        # We use this action pinned at main because we need to have an actual version for the config to load.
-        # Since using the local version would end up nearly using `main` anyway, this is essentially equivalent.
-        uses: angular/dev-infra/github-actions/linting/licenses@main
+        uses: ./github-actions/linting/licenses
         with:
           allow-dependencies-licenses: 'pkg:npm/renovate, pkg:npm/@renovatebot/detect-tools'
 

.github/local-actions/lock-closed/main.js

@@ -7,7 +7,7 @@
   "type": "module",
   "private": true,
   "dependencies": {
-    "@octokit/auth-app": "8.0.2",
+    "@octokit/auth-app": "8.1.0",
     "@octokit/request-error": "7.0.0",
     "@octokit/rest": "22.0.0",
     "@octokit/webhooks-types": "7.6.1",

.github/ng-renovate/package.json

@@ -14,8 +14,8 @@ runs:
       uses: actions/dependency-review-action@bc41886e18ea39df68b1b1245f4184881938e050 # v4.7.2
       env:
         # The action ref here allows us to import the config file from the same sha we rely on in the downstream usage
-        ACTION_REF: ${{ github.action_ref }}
-        ACTION_REPO: ${{ github.action_repository }}
+        ACTION_REF: ${{ github.action_ref || 'main' }}
+        ACTION_REPO: ${{ github.action_repository || 'angular/dev-infra' }}
       with:
         config-file: '${{ env.ACTION_REPO }}/github-actions/linting/licenses/dependency-review-config.yml@${{ env.ACTION_REF }}'
         allow-dependencies-licenses: '${{inputs.allow-dependencies-licenses}}'