Skip to content

chore(deps): bump actions/setup-node from 6 to 7 - #590

Merged
goosewobbler merged 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-7
Jul 20, 2026
Merged

goosewobbler merged 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps actions/setup-node from 6 to 7.

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

... (truncated)

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Greptile Summary

Bumps actions/setup-node from v6 to v7 across all workflow files and the composite action.yml. The update is consistent and complete — all 9 references across 3 files are updated.

  • action.yml and both example workflow files (examples-smoke.yml, examples-validate.yml) uniformly move to actions/setup-node@v7, picking up the v7.0.0 changes: new cache-primary-key/cache-matched-key outputs, ESM migration, removal of the spurious NODE_AUTH_TOKEN export, and the mirrorToken null-guard fix.
  • No configuration changes are needed to adopt v7 — the inputs and behaviour relevant to this repo (node-version, cache) are unchanged.

Confidence Score: 5/5

Routine version bump with no breaking changes to the inputs or behaviour this repo relies on — safe to merge.

All 9 references to actions/setup-node are updated consistently. The v7 release notes show no breaking changes to the node-version or cache inputs used here; the differences are additive outputs and internal ESM refactoring. No logic, configuration, or behaviour is altered in this repo.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/examples-smoke.yml Updates 6 occurrences of actions/setup-node from v6 to v7; no structural changes
.github/workflows/examples-validate.yml Updates 2 occurrences of actions/setup-node from v6 to v7; no structural changes
action.yml Updates the composite action's own actions/setup-node reference from v6 to v7

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Dependabot PR: setup-node v6 → v7] --> B[action.yml]
    A --> C[examples-smoke.yml]
    A --> D[examples-validate.yml]
    B --> E["actions/setup-node@v7\n(composite action)"]
    C --> F["6x actions/setup-node@v7\n(smoke test jobs)"]
    D --> G["2x actions/setup-node@v7\n(validate jobs)"]
    E & F & G --> H[v7 features: cache-primary-key/cache-matched-key outputs\nESM migration, NODE_AUTH_TOKEN fix]
Loading
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    A[Dependabot PR: setup-node v6 → v7] --> B[action.yml]
    A --> C[examples-smoke.yml]
    A --> D[examples-validate.yml]
    B --> E["actions/setup-node@v7\n(composite action)"]
    C --> F["6x actions/setup-node@v7\n(smoke test jobs)"]
    D --> G["2x actions/setup-node@v7\n(validate jobs)"]
    E & F & G --> H[v7 features: cache-primary-key/cache-matched-key outputs\nESM migration, NODE_AUTH_TOKEN fix]
Loading

Reviews (1): Last reviewed commit: "chore(deps): bump actions/setup-node fro..." | Re-trigger Greptile

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the area:dependencies Updating dependencies label Jul 20, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Standing release PR: #582 · v0.41.1 queued (4 packages) · open 8h 10m · ✅ ready to merge

Release Preview — v0.41.0 → v0.41.1

Note: Labels on this PR are advisory in standing-pr mode. Bumps come from conventional commits in the standing PR; override by editing labels on the standing PR itself. Add release:immediate to bypass the standing PR and release this PR directly.

These changes will be added to the release PR (#582) when merged:

Changelog

monorepo 0.41.0 → 0.41.1

Changed

  • bump actions/setup-node from 6 to 7 (deps)

All packages → 0.41.1 (sync versioning)

  • @releasekit/version
  • @releasekit/notes
  • @releasekit/publish
  • @releasekit/release

After merge — predicted release

No version escalation — this PR's changes will be included in the queued release without affecting the projected versions.

Package Standing PR This PR After merge
monorepo 0.41.1 0.41.1 0.41.1

Updated automatically by ReleaseKit

@goosewobbler
goosewobbler merged commit 7116c94 into main Jul 20, 2026
39 of 41 checks passed
@goosewobbler
goosewobbler deleted the dependabot/github_actions/actions/setup-node-7 branch July 20, 2026 07:48
@github-actions github-actions Bot mentioned this pull request Jul 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:dependencies Updating dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant