ci: bump anolilab/workflows lock-file-maintenance to v25.0.1

[prisis]

Bumps the reusable anolilab/workflows lock-file-maintenance workflow to v25.0.1.

That release fixes the scheduled Lock File Maintenance job failing to push its commit:

fatal: could not read Username for 'https://github.com': No such device or address
Error: Invalid status code: 128

The reusable workflow checked out with persist-credentials: false, so the downstream git-auto-commit-action had no credentials to push with (fixed in anolilab/workflows#555).

For this file, the only changes between the previous pin and v25.0.1 are a harden-runner bump, a step/setup bump, and the persist-credentials fix — inputs/secrets are unchanged.

Summary by CodeRabbit

• Chores
  • Updated the automated lock-file maintenance process. Its existing inputs and secret remain unchanged, and this update does not change app functionality.

[github-actions]

Thank you for following the naming conventions! 🙏

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 1

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 7ae8863c-51ba-429c-b1c7-b5095b2383a2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: da1427e2-decf-4570-bd0f-c1ea9caabde2

📥 Commits

Reviewing files that changed from the base of the PR and between e127cf5 and 101f9fb.

📒 Files selected for processing: 1

• .github/workflows/lock-file-maintenance.yml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📝 Walkthrough

The lock-file maintenance job now references reusable workflow commit 986f549679af57daf7997679e2a6ffce5dbb4d6b6 (v25.0.1), replacing b5d611c5dda8645e93f2407e3d3fee250a9f5376 (v24.1.0). The remaining job inputs and secret are unchanged.

Changes: Lock-file maintenance

Layer / File(s)	Summary
Update reusable workflow revision .github/workflows/lock-file-maintenance.yml	The job references commit 986f549679af57daf7997679e2a6ffce5dbb4d6b6 instead of b5d611c5dda8645e93f2407e3d3fee250a9f5376.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Bug fix

Merge Risk: ⚪ Minimal · up to 3d5e7

Merge Risk: ⚪ Minimal · up to 3d5e7

The workflow update addresses the reported scheduled push failure without changing the caller interface. No actionable merge-blocking risk remains.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly and concisely describes the main change: updating the anolilab/workflows lock-file maintenance workflow to v25.0.1.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches: 💡 1

⚔️ Resolve merge conflicts: 💡

• Resolve merge conflict in branch fix/bump-lockfile-maintenance-workflow

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​anolilab/​eslint-config@​30.0.7

View full report