chore(deps): update pnpm/action-setup action to v4.2.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
pnpm/action-setup	action	minor	v4.1.0 -> v4.2.0

---

Release Notes

pnpm/action-setup (pnpm/action-setup)

v4.2.0

Compare Source

When there's a .npmrc file at the root of the repository, pnpm will be fetched from the registry that is specified in that .npmrc file #​179

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: efc8d60

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
react-shiki	Ready	Preview	Comment	Dec 5, 2025 5:09am

[claude]

Claude finished @renovate[bot]'s task —— View job

---

PR Review: pnpm/action-setup v4.1.0 → v4.2.0

Todo List:

• Review workflow file changes
• Assess changeset requirements
• Check security implications
• Provide feedback on code quality and best practices

---

Review Summary ✅

This PR looks good to merge! Here's my analysis:

Changes Review

File: .github/workflows/changesets-renovate.yml:27

• Change: pnpm/action-setup@v4.1.0 → pnpm/action-setup@v4.2.0
• Type: Minor version bump of GitHub Action dependency

Changeset Assessment ✅

No changeset needed - This is correct because:

• This updates a GitHub Action dependency, not package source code
• Changes to CI/CD workflow dependencies don't affect the published package
• Only changes to packages/react-shiki/ source code require changesets
• The changeset-bot correctly identified this as not requiring a version bump

Security & Quality Assessment ✅

Security:

• ✅ Safe minor version update from reputable pnpm organization
• ✅ No security vulnerabilities introduced
• ✅ New feature is defensive (respects existing .npmrc configurations)

Functionality:

• ✅ New v4.2.0 feature: Respects .npmrc registry configuration (currently not applicable as no .npmrc exists)
• ✅ Backward compatible change
• ✅ No breaking changes

Code Quality:

• ✅ Single-line change with clear intent
• ✅ Follows semantic versioning practices
• ✅ Automated dependency update maintains consistency

Recommendations

1. Merge as-is - This is a clean, safe dependency update
2. No additional changes needed - Changeset bot assessment is correct
3. Consider: If you plan to customize pnpm registry settings in the future, this update provides that capability

Conclusion

This PR meets all quality standards and can be safely merged without additional changes.