[renovate]

This PR contains the following updates:

Package	Type	Update	Change
oras-project/setup-oras	action	patch	v2.0.2 → v2.0.3

---

Release Notes

oras-project/setup-oras

v2.0.3

Compare Source

Highlights

• Support ORAS CLI version(s): 1.3.5, 1.3.6

What's Changed

• chore(deps): Bump @​types/node from 26.6.2 to 26.6.4 by @​dependabot[bot] in #​208
• docs: remove transient 1.3.4 note from RELEASING.md by @​SatvikMishra08 in #​209
• chore: pin create-pull-request action to commit SHA by @​Brilly-Bohyun in #​213
• docs: update usage examples and document version pinning by @​Brilly-Bohyun in #​215
• docs: document immutable releases and floating tag rules by @​Brilly-Bohyun in #​218
• ci: pin remaining GitHub Actions to commit SHAs by @​Brilly-Bohyun in #​219
• ci: check auto-release workflow names by @​Brilly-Bohyun in #​220
• chore(deps): Bump @​types/node from 26.6.4 to 26.6.5 by @​dependabot[bot] in #​221
• chore: update releases.json for 1.3.6,1.3.5 by @​github-actions[bot] in #​222

New Contributors

• @​SatvikMishra08 made their first contribution in #​209

Full Changelog: oras-project/setup-oras@v2.0.2...v2.0.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.