Skip to content

chore(deps): bump actions/setup-node from 4.4.0 to 6.3.0#53

Open
dependabot[bot] wants to merge 16 commits into
mainfrom
dependabot/github_actions/actions/setup-node-6.3.0
Open

chore(deps): bump actions/setup-node from 4.4.0 to 6.3.0#53
dependabot[bot] wants to merge 16 commits into
mainfrom
dependabot/github_actions/actions/setup-node-6.3.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 13, 2026

Summary

Automated dependency/workflow update for jscraik/rSearch PR #53. Scope is limited to the version bump in this branch.

Checklist

  • Change scope reviewed and limited to dependency/workflow updates.
  • No runtime feature behavior changes intended by this PR.
  • Follow-up validation is tracked via CI checks on this PR.

Testing

  • CI is the validation source for this automation-driven update.
  • No additional local test run was performed in this pass.

Review artifacts

Notes

This body was updated to satisfy repository PR template requirements so checks can evaluate the actual code/workflow changes.

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4.4.0 to 6.3.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4.4.0...v6.3.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency updates github_actions Pull requests that update GitHub Actions code labels Apr 13, 2026
@dependabot dependabot Bot requested a review from jscraik as a code owner April 13, 2026 06:18
@dependabot dependabot Bot added dependencies Dependency updates github_actions Pull requests that update GitHub Actions code labels Apr 13, 2026
jscraik and others added 2 commits April 13, 2026 20:50
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 84c95f1274

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/pr-pipeline.yml Outdated
Co-authored-by: Codex <noreply@openai.com>
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a3032953ac

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/pr-pipeline.yml Outdated
Comment thread package.json Outdated
jscraik and others added 2 commits April 13, 2026 21:56
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0215c24401

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/docs-lint.sh Outdated
Co-authored-by: Codex <noreply@openai.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 20, 2026

A newer version of actions/setup-node exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

Merge current main into the Dependabot setup-node upgrade and carry forward the repository hook fixes required by the current pre-push governance gate.

Validation: DOCS_LINT_SCOPE=staged pnpm docs:lint

Validation: pnpm lint

Validation: pnpm typecheck

Validation: pnpm test

Validation: pnpm build

Validation: make audit

Validation: bash scripts/check-environment.sh

Co-authored-by: Codex <noreply@openai.com>
@chatgpt-codex-connector
Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.

Match the GitHub check job installation path so npm run check does not invoke Corepack/pnpm during CI.

Validation: npm run check

Co-authored-by: Codex <noreply@openai.com>
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5651fba089

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/docs-lint.sh Outdated

if [[ -n "${CI_BASE_SHA:-}" && -n "${CI_HEAD_SHA:-}" ]]; then
mapfile -d '' changed_markdown < <(
git diff --name-only -z "$CI_BASE_SHA" "$CI_HEAD_SHA" -- '*.md'
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Exclude deleted Markdown files from CI docs lint

The CI path collects files with git diff --name-only but does not apply --diff-filter=ACMR, so deleted .md files are still passed to markdownlint-cli2. On PRs that remove documentation files, this makes the linter receive paths that no longer exist and can fail the docs gate even though there is nothing left to lint; the staged path below already uses --diff-filter=ACMR, so CI and local behavior are inconsistent.

Useful? React with 👍 / 👎.

Comment thread scripts/check-diagram-freshness.sh Outdated
Comment on lines +155 to +158
git -C "$REPO_ROOT" restore --worktree -- \
.diagram/context/diagram-context.md \
.diagram/context/diagram-context.meta.json \
.diagram/manifest.json
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Avoid restoring tracked diagram files unconditionally

This unconditional git restore --worktree resets tracked diagram artifacts whenever the check passes, which can silently discard a developer’s unstaged edits during make hooks-pre-push (this script is invoked from that hook). The freshness check should not mutate user worktrees unless it first proves those files were untouched before running the refresh.

Useful? React with 👍 / 👎.

jscraik and others added 2 commits May 8, 2026 23:18
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
@chatgpt-codex-connector
Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.

Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 102d0c10b7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread src/cli.ts
Comment on lines +1443 to +1444
} catch {
return undefined;
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Fail docs-gate when git diff cannot be computed

runGit converts every git error into undefined, and getChangedMarkdownFiles then treats that as an empty change set. In CI or shallow-history contexts where CI_BASE_SHA/CI_HEAD_SHA (or merge-base resolution) are invalid, docs-gate will report success instead of failing, so markdown governance checks are silently bypassed rather than surfaced as an actionable error.

Useful? React with 👍 / 👎.

Comment thread scripts/check-environment.sh Outdated
echo "Environment check passed (attestation: $ATTESTATION_PATH)"

if git -C "$REPO_ROOT" ls-files --error-unmatch "${ATTESTATION_PATH#$REPO_ROOT/}" >/dev/null 2>&1; then
git -C "$REPO_ROOT" restore --worktree -- "${ATTESTATION_PATH#$REPO_ROOT/}"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Preserve local edits before restoring attestation file

This unconditional restore drops any unstaged edits to a tracked attestation file after a successful run. Because hooks-pre-push invokes scripts/check-environment.sh, a normal git push can silently erase local work in artifacts/policy/environment-attestation.json; the script should either verify the file was clean before running or fail with guidance instead of mutating user state.

Useful? React with 👍 / 👎.

jscraik and others added 3 commits May 8, 2026 23:39
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
@chatgpt-codex-connector
Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.

Co-authored-by: Codex <noreply@openai.com>
@chatgpt-codex-connector
Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.

Resolve workflow, docs gate, and package conflicts while preserving the setup-node upgrade and explicit CLI test-client gate.

Co-authored-by: Codex <noreply@openai.com>
@chatgpt-codex-connector
Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant