← Back to issue list

chore(deps): update actions/setup-node action to v7

View original Github issue

Metadata

Project
craft-actions
Number
#86
Type
pull request
State
merged
Author
renovate[bot]
Labels
dependencies
Created
Updated
Closed

Current evaluation

Renovate PR canonical/craft-actions#86 was approved and merged, bumping actions/setup-node from v6.4.0 to v7.0.0 in a single CI workflow line (+1/-1) with all checks passing.

Resolution: closed resolved

Reason: The PR itself is the resolution: it is in merged state with one approving review, all CI checks (Canonical CLA, test-action-code, run-rockcraft-pack-action matrix) passing, and a 1-line diff changing the actions/setup-node pin from v6.4.0 to v7.0.0.

Evaluated by: mr-cal-bot

No scores available.

Issue body

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v6.4.0` → `v7.0.0` | --- ### Release Notes <details> <summary>actions/setup-node (actions/setup-node)</summary> ### [`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.0.0) ##### What's Changed ##### Enhancements: - Add cache-primary-key and cache-matched-key as outputs by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1577](https://redirect.github.com/actions/setup-node/pull/1577) - Migrate to ESM and upgrade dependencies by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1574](https://redirect.github.com/actions/setup-node/pull/1574) ##### Bug fixes: - Remove dummy NODE\_AUTH\_TOKEN export by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1558](https://redirect.github.com/actions/setup-node/pull/1558) - Only use `mirrorToken` in `getManifest` if it's provided by [@&#8203;deiga](https://redirect.github.com/deiga) in [#&#8203;1548](https://redirect.github.com/actions/setup-node/pull/1548) ##### Documentation updates: - Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@&#8203;chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#&#8203;1536](https://redirect.github.com/actions/setup-node/pull/1536) - docs: Update restore-only cache documentation by [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in [#&#8203;1550](https://redirect.github.com/actions/setup-node/pull/1550) - docs: Update caching recommendations to mitigate cache poisoning risks by [@&#8203;chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#&#8203;1567](https://redirect.github.com/actions/setup-node/pull/1567) ##### Dependency update: - Upgrade [@&#8203;actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@&#8203;jasongin](https://redirect.github.com/jasongin) in [#&#8203;1569](https://redirect.github.com/actions/setup-node/pull/1569) ##### New Contributors - [@&#8203;chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#&#8203;1536](https://redirect.github.com/actions/setup-node/pull/1536) - [@&#8203;deiga](https://redirect.github.com/deiga) made their first contribution in [#&#8203;1548](https://redirect.github.com/actions/setup-node/pull/1548) - [@&#8203;jasongin](https://redirect.github.com/jasongin) made their first contribution in [#&#8203;1569](https://redirect.github.com/actions/setup-node/pull/1569) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0> ### [`v7`](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0) ### [`v6.5.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.5.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.4.0...v6.5.0) ##### What's Changed - Update [@&#8203;actions/cache](https://redirect.github.com/actions/cache) to 5.1.0 and add security overrides for undici and fast-xml-parser by [@&#8203;HarithaVattikuti](https://redirect.github.com/HarithaVattikuti) in [#&#8203;1579](https://redirect.github.com/actions/setup-node/pull/1579) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - "after 1 am and before 7 am" 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-actions). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Renovate PR canonical/craft-actions#86 was approved and merged, bumping actions/setup-node from v6.4.0 to v7.0.0 in a single CI workflow line (+1/-1) with all checks passing.
stealth/space-bunny-alpha — closed resolved Merged PR canonical/craft-actions#86 upgrades actions/setup-node from v6.4.0 to v7.0.0, changing one workflow line after approval and with all CI checks passing.
qwen/qwen3.6-35b-a3b — — Merged automated dependency update upgrading actions/setup-node from v6.4.0 to v7.0.0. Approved by one reviewer and passed all CI checks. The major release migrates to ESM, adds cache key outputs, fixes bugs, and updates documentation.
qwen3.6-35b-a3b-mtp-q6
Staleness: 0
Complexity: 5
Confidence: 95
needs review Updates actions/setup-node from v6.4.0 to v7.0.0. Generated by Renovate. All CI checks are passing. Awaiting maintainer review.

Update history

Date Change
updated
created

Related work

  • Related To: canonical/craft-application#1142 (confidence 72%)

    Same Renovate setup-node v6→v7 bump in a sibling Canonical repo, merged in the same wave.

  • Related To: canonical/craft-cli#474 (confidence 70%)

    Identical setup-node v6→v7 dependency update, merged into craft-cli main.

  • Related To: canonical/snapcraft#6371 (confidence 68%)

    Sibling Canonical repo's setup-node v7 bump, merged across two workflow files.

  • Related To: canonical/craft-providers#1014 (confidence 55%)

    Same bump but closed unmerged there after zizmor/slow-test failures, showing the update was not universally green.

Related issues

Issue Project State Summary Similarity
#586 chore(deps): update actions/setup-node action to v4 craft-parts merged Renovate PR merged (commit cc208c5d), bumping actions/setup-node v3 to v4 in the CI workflow. Superseded later by #439 (v5) and #454 (v6); now pinned to v7.0.0.
88%
#1142 build(deps): update actions/setup-node action to v7 (main) craft-application merged Renovate PR #1142 bumping actions/setup-node from v6 to v7 in a CI workflow was approved and merged into main (1-line diff, automerge enabled).
87%
#6371 build(deps): update actions/setup-node action to v7 (main) snapcraft merged Renovate PR #6371 was approved and merged into snapcraft main, bumping actions/setup-node from v6 to v7 in two CI workflow files (+2/-2). CI passed except integration-spread-tests-store and OSV-scanner (unrelated).
83%
#77 chore(deps): update actions/checkout action to v7 craft-actions merged Renovate's actions/checkout v6.0.3 → v7.0.0 major bump was approved and merged into main as commit c9a166a (+1/-1 in .github/workflows/test.yaml); all CI green. Later refined by #83 to v7.0.1 (45232fc).
83%
#212 build(deps): update actions/setup-node action to v6 (main) craft-archives merged Renovate PR #212 bumped actions/setup-node from v5 to v6 in craft-archives; approved with all CI checks green and merged into main via commit c4ef420. Superseded later by setup-node v7 pin.
83%
#175 build(deps): update actions/setup-node action to v7 (main) debcraft merged Renovate's actions/setup-node v6→v7 bump was approved and merged into debcraft main via PR #175 (commit 54e0113), changing the action version in 2 files (+2/-2).
83%
#203 build(deps): update actions/setup-node action to v7 (main) craft-grammar merged Merged PR #203 upgraded actions/setup-node from v6 to v7 in main via commit 452a1a1.
83%
#255 build(deps): update actions/setup-node action to v7 (main) craft-platforms merged Merged into main in commit 9ab7dda, updating actions/setup-node from v6 to v7 after approval and successful project CI checks.
82%
#83 chore(deps): update actions/checkout action to v7.0.1 craft-actions merged Merged PR #83 updated actions/checkout from v7.0.0 to v7.0.1 in commit 45232fc; all CI checks passed.
82%
#577 chore(deps): update actions/upload-artifact action to v7 fetch-service merged Renovate PR #577 bumping actions/upload-artifact v6 -> v7 in .github/workflows/tests.yaml was approved and merged; commit 5b38037 "chore(deps): update actions/upload-artifact action to v7 (#577)" landed on main.
82%