chore(deps): bump actions/setup-node from 6 to 7
Merged
DE
3mo ago+6+6+0123456789-6-6-0123456789
Bumps actions/setup-node from 6 to 7.
Release notes
Sourced from actions/setup-node's releases.
v7.0.0
What's Changed
Enhancements:
- Add cache-primary-key and cache-matched-key as outputs by
@gowridurgadin actions/setup-node#1577- Migrate to ESM and upgrade dependencies by
@gowridurgadin actions/setup-node#1574Bug fixes:
- Remove dummy NODE_AUTH_TOKEN export by
@gowridurgadin actions/setup-node#1558- Only use
mirrorTokeningetManifestif it's provided by@deigain actions/setup-node#1548Documentation updates:
- Add documentation for publishing to npm with Trusted Publisher (OIDC) by
@chiranjib-swainin actions/setup-node#1536- docs: Update restore-only cache documentation by
@priya-kinthaliin actions/setup-node#1550- docs: Update caching recommendations to mitigate cache poisoning risks by
@chiranjib-swainin actions/setup-node#1567Dependency update:
- Upgrade
@actions/cacheto 5.1.0, log cache write denied by@jasonginin actions/setup-node#1569New Contributors
@chiranjib-swainmade their first contribution in actions/setup-node#1536@deigamade their first contribution in actions/setup-node#1548@jasonginmade their first contribution in actions/setup-node#1569Full Changelog: https://github.com/actions/setup-node/compare/v6...v7.0.0
v6.5.0
What's Changed
- Update
@actions/cacheto 5.1.0 and add security overrides for undici and fast-xml-parser by@HarithaVattikutiin actions/setup-node#1579Full Changelog: https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0
v6.4.0
What's Changed
Dependency updates:
- Upgrade
@actionsdependencies by@Copilotin actions/setup-node#1525- Update Node.js versions in versions.yml and bump package to v6.4.0 by
@priya-kinthaliin actions/setup-node#1533New Contributors
@Copilotmade their first contribution in actions/setup-node#1525Full Changelog: https://github.com/actions/setup-node/compare/v6...v6.4.0
v6.3.0
What's Changed
Enhancements:
- Support parsing
devEnginesfield by@susnuxin actions/setup-node#1283
... (truncated)
Commits
8207627Migrate to ESM and upgrade dependencies (#1574)04be95cAdd cache-primary-key and cache-matched-key as outputs (#1577)7c2c68ddocs: Update caching recommendations to mitigate cache poisoning risks (#1567)6a61c03Merge pull request #1569 from jasongin/update-actions-cache-5.1.030eb73bResolve high-severity audit issues4e1a87aUpdate dist360237fStrict equality4f8aac5Bump@actions/cacheto 5.1.0, log cache write deniedf4a67bbOnly usemirrorTokeningetManifestif it's provided (#1548)0355742Remove dummy NODE_AUTH_TOKEN export (#1558)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Summary by cubic
Upgrade GitHub Actions to use actions/setup-node@v7 across CI, deploy, CodeQL, and publish workflows. Brings bug fixes, security updates, and new cache outputs without changing workflow logic.
- Dependencies
- Bumped
actions/setup-nodefrom v6 to v7 in.github/workflows/ci.yml,codeql.yml,deploy.yml, andpublish-npm.yml. - Gains
cache-primary-keyandcache-matched-keyoutputs; no config changes required.
- Bumped