[dependabot]

Bumps hustcer/setup-nu from 3.23 to 3.28.

Release notes

Sourced from hustcer/setup-nu's releases.

v3.28

[3.28] - 2026-10-03

Miscellaneous Tasks

• Bundle the action with esbuild for Node 24

Deps

• Upgrade pnpm to v12
• Upgrade globby,cspell & @​biomejs/biome
• Upgrade undici,@​biomejs/biome,cspell & lefthook

v3.27

[3.27] - 2026-08-16

Bug Fixes

• Correct commit SHA pinning and release pagination (#220)
• Correct version range handling, check-latest and release fallback (#221)
• Harden plugin registration, token handling and API pagination (#222)
• Stop polluting the workspace and the user's Nu config (#223)

Features

• Support pinned commit sha (#219)

Testing

• Add a regression suite for release resolution and plugin registration (#224)

Deps

• Upgrade @​vercel/ncc,globby and fix all pnpm audit warnings

New Contributors

• @​sheeeng made their first contribution in hustcer/setup-nu#219

Full Changelog: hustcer/setup-nu@v3.26...v3.27

v3.26

[3.26] - 2026-08-05

Miscellaneous Tasks

• Bump undici from 6.23.0 to 8.7.0 (#217)

Deps

• Upgrade undici,semver, & @​vercel/ncc

... (truncated)

Changelog

Sourced from hustcer/setup-nu's changelog.

Changelog

All notable changes to this project will be documented in this file.

[3.28] - 2026-10-03

Miscellaneous Tasks

• Bundle the action with esbuild for Node 24

Deps

• Upgrade pnpm to v12
• Upgrade globby,cspell & @​biomejs/biome
• Upgrade undici,@​biomejs/biome,cspell & lefthook

[3.27] - 2026-08-16

Bug Fixes

• Correct commit SHA pinning and release pagination (#220)
• Correct version range handling, check-latest and release fallback (#221)
• Harden plugin registration, token handling and API pagination (#222)
• Stop polluting the workspace and the user's Nu config (#223)

Features

• Support pinned commit sha (#219)

Testing

• Add a regression suite for release resolution and plugin registration (#224)

Deps

• Upgrade @​vercel/ncc,globby and fix all pnpm audit warnings

[3.26] - 2026-08-05

Miscellaneous Tasks

• Bump undici from 6.23.0 to 8.7.0 (#217)

Deps

• Upgrade undici,semver, & @​vercel/ncc
• Upgrade globby,undici,@​vercel/ncc & semver
• Bump actions/checkout to v7 (#216)
• Upgrade lefthook,@​types/node & @​biomejs/biome
• Upgrade globby,undici & @​biomejs/biome

... (truncated)

Commits

• 95cd3bf Bump to v3.28
• 913bafb fix: bundle the action with esbuild for Node 24
• 90cb9a6 deps: Upgrade undici,@​biomejs/biome,cspell & lefthook
• 913f2aa deps: Upgrade globby,cspell & @​biomejs/biome
• 90bf9bd chore: Upgrade pnpm to v12
• 9215c80 Bump to v3.27
• 97e718f ci skip
• f8b70bd test: add a regression suite for release resolution and plugin registration (...
• 8dd8c09 fix: stop polluting the workspace and the user's Nu config (#223)
• c18baa5 fix: harden plugin registration, token handling and API pagination (#222)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[bompus]

Could this dependency update also cover action/check-user/action.yml? At this PR's current head, the composite still pins hustcer/setup-nu@920172d92eb04671776f3ba69d605d3b09351c30 (v3.22) with version: "*". The diff updates only .github/workflows/test.yml and .github/workflows/update-floating-tags.yml, so consumers of the Check User action retain the old dependency.

The Label PR job for pingdotgg/t3code#22113 resolved Vouch v1 to d66fa29a64600490892131ad87597c30c91fcac4. Its setup step failed with No release for Nushell matching version specifier * of default feature. before the user check or label sync.

setup-nu#220 fixes release pagination and asset filtering; #221 fixes version-range handling and release fallback. Those fixes are included in v3.28, the version proposed here. The failed job did not retain its release API response, so I cannot establish that pagination caused this particular failure.

Please consider updating the composite dependency too, validating its Check User path, and making the validated change available through the supported Vouch ref. I have not executed or validated the proposed v3.28 composite update, and am not claiming it resolves that incident.