chore(deps): update actions/setup-node action to v7
Metadata
Current evaluation
Merged automated dependency update upgrading actions/setup-node from v6.4.0 to v7.0.0. Approved by one reviewer and passed all CI checks. The major release migrates to ESM, adds cache key outputs, fixes bugs, and updates documentation.
Suggested action: —
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v6.4.0` → `v7.0.0` |
---
### Release Notes
<details>
<summary>actions/setup-node (actions/setup-node)</summary>
### [`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.0.0)
##### What's Changed
##### Enhancements:
- Add cache-primary-key and cache-matched-key as outputs by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1577](https://redirect.github.com/actions/setup-node/pull/1577)
- Migrate to ESM and upgrade dependencies by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1574](https://redirect.github.com/actions/setup-node/pull/1574)
##### Bug fixes:
- Remove dummy NODE\_AUTH\_TOKEN export by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1558](https://redirect.github.com/actions/setup-node/pull/1558)
- Only use `mirrorToken` in `getManifest` if it's provided by [@​deiga](https://redirect.github.com/deiga) in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
##### Documentation updates:
- Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- docs: Update restore-only cache documentation by [@​priya-kinthali](https://redirect.github.com/priya-kinthali) in [#​1550](https://redirect.github.com/actions/setup-node/pull/1550)
- docs: Update caching recommendations to mitigate cache poisoning risks by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1567](https://redirect.github.com/actions/setup-node/pull/1567)
##### Dependency update:
- Upgrade [@​actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://redirect.github.com/jasongin) in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
##### New Contributors
- [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- [@​deiga](https://redirect.github.com/deiga) made their first contribution in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
- [@​jasongin](https://redirect.github.com/jasongin) made their first contribution in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
**Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0>
### [`v7`](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
### [`v6.5.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.5.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.4.0...v6.5.0)
##### What's Changed
- Update [@​actions/cache](https://redirect.github.com/actions/cache) to 5.1.0 and add security overrides for undici and fast-xml-parser by [@​HarithaVattikuti](https://redirect.github.com/HarithaVattikuti) in [#​1579](https://redirect.github.com/actions/setup-node/pull/1579)
**Full Changelog**: <https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0>
</details>
---
### Configuration
📅 **Schedule**: (in timezone Etc/UTC)
- Branch creation
- "every weekend"
- Automerge
- "after 1 am and before 7 am"
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-actions).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency update upgrading actions/setup-node from v6.4.0 to v7.0.0. Approved by one reviewer and passed all CI checks. The major release migrates to ESM, adds cache key outputs, fixes bugs, and updates documentation. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
0
Complexity:
5
Confidence:
95
|
needs review | Updates actions/setup-node from v6.4.0 to v7.0.0. Generated by Renovate. All CI checks are passing. Awaiting maintainer review. |
Update history
| Date | Change |
|---|---|
| updated | |
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #255 build(deps): update actions/setup-node action to v7 (main) | craft-platforms | merged | Merged automated update upgrading actions/setup-node from v6 to v7. Approved by one reviewer and passing CI checks, it was automatically merged into main via Renovate. The v7 release migrates to ESM, adds cache key outputs, and includes bug fixes. | |
| #175 build(deps): update actions/setup-node action to v7 (main) | debcraft | merged | Merged automated dependency update upgrading actions/setup-node from v6 to v7. Approved by one reviewer, passed CI checks, and merged to main. Includes ESM migration, new cache outputs, and bug fixes. | |
| #6371 build(deps): update actions/setup-node action to v7 (main) | snapcraft | merged | Merged automated dependency update upgrading actions/setup-node from v6 to v7. The change was auto-merged to main after passing required CI checks, introducing ESM migration, new cache outputs, and bug fixes. | |
| #474 build(deps): update actions/setup-node action to v7 (main) | craft-cli | merged | Automatically merged after passing all CI checks and receiving approval. Updated actions/setup-node from v6 to v7, applying ESM migration, new cache outputs, and security fixes. | |
| #633 chore(deps): update actions/setup-go action to v7 | fetch-service | merged | Merged automated dependency update upgrading the actions/setup-go GitHub Action from v6 to v7. Approved by a reviewer, passed CI checks, and merged into the main branch. | |
| #77 chore(deps): update actions/checkout action to v7 | craft-actions | merged | Merged automated dependency update upgrading actions/checkout from v6.0.3 to v7.0.0. Approved by reviewer, passed all CI checks, and changed one file. | |
| #623 chore(deps): update actions/checkout action to v7 | fetch-service | merged | Merged automated dependency update upgrading actions/checkout from v6 to v7. Approved by two reviewers, passed CI checks, and integrated into the main branch. | |
| #1014 build(deps): update actions/setup-node action to v7 (main) | craft-providers | open | Automated dependency update from actions/setup-node v6 to v7, with passing CI and automerge enabled. | |
| #83 chore(deps): update actions/checkout action to v7.0.1 | craft-actions | merged | Merged automated dependency update upgrading actions/checkout from v7.0.0 to v7.0.1. Approved by two reviewers, passed all CI checks, and auto-merged via Renovate configuration. | |
| #1142 build(deps): update actions/setup-node action to v7 (main) | craft-application | merged | Merged automated dependency update upgrading the actions/setup-node GitHub Action from v6 to v7. Applied via Renovate bot with automerge enabled, the change passed CI checks and was successfully merged to the main branch. |