build(deps): update github actions to v7 (main)
Metadata
Current evaluation
Renovate PR #2847 merged into main, bumping actions/setup-go, setup-node and setup-python from v6 to v7 across 4 CI workflow files (+4/-4 lines).
Resolution: closed resolved
Reason: The PR itself was merged into main (state: merged, approved by 1 reviewer, lint/docs/snap-build and fast tests passing) after bumping the three setup actions to their v7 major releases, so the dependency update is now landed in charmcraft's workflows.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-go](https://redirect.github.com/actions/setup-go) | action | major | `v6` → `v7` |
| [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v6` → `v7` |
| [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | major | `v6` → `v7` |
---
### Release Notes
<details>
<summary>actions/setup-go (actions/setup-go)</summary>
### [`v7.0.0`](https://redirect.github.com/actions/setup-go/releases/tag/v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-go/compare/v7.0.0...v7.0.0)
##### What's Changed
- Migrate to ESM and upgrade dependencies by [@​priyagupta108](https://redirect.github.com/priyagupta108) in [#​763](https://redirect.github.com/actions/setup-go/pull/763)
- chore(deps): bump [@​actions/cache](https://redirect.github.com/actions/cache) to 6.2.0 by [@​philip-gai](https://redirect.github.com/philip-gai) in [#​771](https://redirect.github.com/actions/setup-go/pull/771)
##### New Contributors
- [@​philip-gai](https://redirect.github.com/philip-gai) made their first contribution in [#​771](https://redirect.github.com/actions/setup-go/pull/771)
**Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v7.0.0>
### [`v7`](https://redirect.github.com/actions/setup-go/compare/v6.5.0...v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-go/compare/v6.5.0...v7.0.0)
</details>
<details>
<summary>actions/setup-node (actions/setup-node)</summary>
### [`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.0.0)
##### What's Changed
##### Enhancements:
- Add cache-primary-key and cache-matched-key as outputs by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1577](https://redirect.github.com/actions/setup-node/pull/1577)
- Migrate to ESM and upgrade dependencies by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1574](https://redirect.github.com/actions/setup-node/pull/1574)
##### Bug fixes:
- Remove dummy NODE\_AUTH\_TOKEN export by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1558](https://redirect.github.com/actions/setup-node/pull/1558)
- Only use `mirrorToken` in `getManifest` if it's provided by [@​deiga](https://redirect.github.com/deiga) in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
##### Documentation updates:
- Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- docs: Update restore-only cache documentation by [@​priya-kinthali](https://redirect.github.com/priya-kinthali) in [#​1550](https://redirect.github.com/actions/setup-node/pull/1550)
- docs: Update caching recommendations to mitigate cache poisoning risks by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1567](https://redirect.github.com/actions/setup-node/pull/1567)
##### Dependency update:
- Upgrade [@​actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://redirect.github.com/jasongin) in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
##### New Contributors
- [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- [@​deiga](https://redirect.github.com/deiga) made their first contribution in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
- [@​jasongin](https://redirect.github.com/jasongin) made their first contribution in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
**Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0>
### [`v7`](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
</details>
<details>
<summary>actions/setup-python (actions/setup-python)</summary>
### [`v7.0.0`](https://redirect.github.com/actions/setup-python/compare/v6.3.0...v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-python/compare/v7.0.0...v7.0.0)
### [`v7`](https://redirect.github.com/actions/setup-python/compare/v6.3.0...v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-python/compare/v6.3.0...v7.0.0)
</details>
---
### Configuration
📅 **Schedule**: (in timezone Etc/UTC)
- Branch creation
- "every weekend"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/charmcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zOS4wIiwidXBkYXRlZEluVmVyIjoiNDQuMzkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUFI6IERlcGVuZGVuY2llcyJdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR #2847 merged into main, bumping actions/setup-go, setup-node and setup-python from v6 to v7 across 4 CI workflow files (+4/-4 lines). | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR #2847 merged into main, upgrading actions/setup-go, setup-node, and setup-python from v6 to v7. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency update upgrading GitHub Actions setup-go, setup-node, and setup-python from v6 to v7. The change was automatically merged via Renovate after passing required CI checks. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
0
Complexity:
5
Confidence:
80
|
needs review | Updates GitHub Actions setup-go, setup-node, and setup-python from v6 to v7. Currently pending maintainer review with some slow test failures. |
Update history
| Date | Change |
|---|---|
| updated | |
| created |
Related work
-
Related To:
canonical/craft-store#407
(confidence 55%)
Identical Renovate 'update github actions to v7' bump applied in the sibling craft-store repo; parallel work rather than a resolution.
-
Related To:
canonical/craft-platforms#168
(confidence 40%)
Earlier Renovate major GitHub Actions update in craft-platforms, showing the same recurring automated dependency-bump pattern.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #407 build(deps): update github actions to v7 (main) | craft-store | merged | Merged PR #407 via commit 5b6e8f7, upgrading actions/setup-node and actions/setup-python from v6 to v7 in CI workflows. | |
| #568 build(deps): update github actions to v7 (main) | starbase | merged | Renovate PR #568 was merged via commit 7c9407b, upgrading actions/checkout from v6 to v7 in three GitHub Actions workflow files after approval and with all CI checks passing. | |
| #1232 build(deps): update github actions (main) | craft-application | merged | Renovate PR updating GitHub Actions: setup-node v7.0.0→v7.1.0, setup-uv v10.3.0→v10.3.2, pypi-publish digest, install-action v2.87.26→v2.87.30. CI has failing tests. | |
| #1142 build(deps): update actions/setup-node action to v7 (main) | craft-application | merged | Renovate PR #1142 bumping actions/setup-node from v6 to v7 in a CI workflow was approved and merged into main (1-line diff, automerge enabled). | |
| #389 build(deps): update github actions (main) (major) | craft-store | merged | Merged PR #389 in commit 4741edc, upgrading actions/checkout from v6 to v7 across three GitHub Actions workflow files. | |
| #578 build(deps): update github actions (main) (major) | starbase | merged | Renovate PR canonical/starbase#578 merged into main, bumping actions/setup-node v6→v7 and astral-sh/setup-uv v5→v9.0.0 (+2/-2 lines in a single workflow file) with all CI checks green. | |
| #257 build(deps): update actions/setup-python action to v7 (main) | craft-platforms | merged | Merged PR #257 in commit f47075a, updating actions/setup-python from v6 to v7 with all CI checks passing. | |
| #271 build(deps): update github actions (main) (major) | imagecraft | merged | Renovate PR merged in commit 3b53327, bumping CI actions to cache v5, checkout v6, download-artifact v7, setup-node v6, upload-artifact v6 (3 files, +10/-10); all CI checks passed. | |
| #198 build(deps): update github actions (main) (major) | craft-platforms | merged | Renovate PR merged (commit 3211ae8): bumped actions/download-artifact v6→v7, actions/upload-artifact v5→v6 and astral-sh/setup-uv v6→v7 across CI workflows; all checks passed with 2 approvals. | |
| #497 build(deps): update github actions (main) (major) | starbase | merged | Renovate PR #497 merged via commit 01a6030, bumping actions/download-artifact v7 to v8 and actions/upload-artifact v6 to v7 in CI workflows. Approved by 2 reviewers with all CI checks passing. |