chore(deps): bump tinyland-inc/ci-templates/.github/workflows/js-bazel-package.yml from 61cd1338ca9dae8a25985c0a36ff7beb111449be to 282fbbf9e44f180bd0703f86275676eb444e971a

[dependabot]

Bumps tinyland-inc/ci-templates/.github/workflows/js-bazel-package.yml from 61cd1338ca9dae8a25985c0a36ff7beb111449be to 282fbbf9e44f180bd0703f86275676eb444e971a.

Changelog

Sourced from tinyland-inc/ci-templates/.github/workflows/js-bazel-package.yml's changelog.

Changelog

Format: Keep a Changelog. Versioning: SemVer 2.0.

[Unreleased]

Fixed

• Cloudflare Pages wrapper docs — the consumer example now matches the first live downstream adoption (GFTB PR #28): callers pass job-level contents: read / deployments: write, use secrets: inherit, and do not duplicate the reusable workflow's cloudflare-pages-${{ github.ref }} concurrency group. Duplicating that group deadlocks the caller against the called deploy job before any build step runs.

[2.10.0] — 2026-07-03

Added

• spoke-deploy-cloudflare-pages.yml reusable workflow — a sanctioned, opt-in Cloudflare Pages deploy lane that DRYs the hand-rolled CF-Pages publisher copied into ≥3 spokes: GFTB greatfallstoolbus.org (.github/workflows/deploy-pages.yml), transscendsurvival.org (cloudflare-pages-shadow.yml), and the site.scaffold docs/deploy/cloudflare-pages.md template block. It builds the adapter-static build/ via nix develop --command just setup/check/build (with setup_command / check_command / build_command inputs defaulting to just setup / just check / just build), exposes declared host node_version / pnpm_version inputs for the Cloudflare action environment, resolves project_name (input; defaults to the slugified repo name) and the deploy branch (from github.head_ref || github.ref_name, lowercased/sanitized), credential-skips with a ::notice:: when CLOUDFLARE_API_TOKEN / CLOUDFLARE_ACCOUNT_ID are absent, and never deploys or mutates on PR events. secrets: are declared required: false; permissions: are contents: read + deployments: write. This is the CF-Pages opt-in — it does not replace the scaffold default GitHub-Pages lane. GFTB and transscendsurvival can adopt it in follow-ups by collapsing their inline copies into a thin uses: wrapper.

[2.9.1] — 2026-07-03

Added

• flywheel-reapi-proof pending-cancel retry — callers may opt into retry_cancelled_before_start: true (with max_attempts, default 3) so a GF proof dispatch cancelled before GitHub assigns a job can be retried with a fresh request id. This targets GitHub Actions concurrency pending-slot eviction only; existing callers are byte-identical unless they opt in.

... (truncated)

Commits

• 282fbbf ci: add Dependabot config for automated dependency updates (#90)
• b978515 docs: CF-Pages lane example must pass secrets explicitly, not inherit (#77)
• 665d24e docs(spoke-deploy): document proven Cloudflare Pages wrapper (#75)
• 2c07f97 release: v2.10.0
• 5b21868 feat(spoke-deploy): reusable Cloudflare Pages deploy lane (DRY the hand-rolle...
• ccf6076 release: v2.9.1
• c783d70 fix(flywheel): retry pending-cancelled REAPI proofs (#71)
• 899d1d5 release: v2.9.0
• a0c4a5c feat(spoke-ci): parameterize heavy/kvm runner classes for org-scope tenancies...
• b26494b release: v2.8.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)