build(deps): update actions/setup-node action to v7 (main)

Metadata

Project: craft-cli
Number: #474
Type: pull request
State: merged
Author: renovate[bot]
Labels: PR: Dependencies
Created: 2026-08-15 03:23 AM UTC
Updated: 2026-08-17 07:24 PM UTC
Closed: 2026-08-17 07:20 PM UTC

Current evaluation

Renovate's actions/setup-node v6→v7 major bump merged into main via commit bb83cd8 (PR #474), updating .github/workflows/check-renovate.yaml with all CI checks green.

Resolution: closed resolved

Reason: The PR itself was the fix and was merged: commit bb83cd8 "build(deps): update actions/setup-node action to v7 (main) (#474)" is the latest commit touching .github/workflows/check-renovate.yaml, changing the single `uses: actions/setup-node@v6` line to `@v7`. All lint, policy, and test checks passed with none failing.

Evaluated by: mr-cal-bot

No scores available.

Issue body

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-node (actions/setup-node)</summary> ### [`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.0.0) ##### What's Changed ##### Enhancements: - Add cache-primary-key and cache-matched-key as outputs by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1577](https://redirect.github.com/actions/setup-node/pull/1577) - Migrate to ESM and upgrade dependencies by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1574](https://redirect.github.com/actions/setup-node/pull/1574) ##### Bug fixes: - Remove dummy NODE\_AUTH\_TOKEN export by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1558](https://redirect.github.com/actions/setup-node/pull/1558) - Only use `mirrorToken` in `getManifest` if it's provided by [@deiga](https://redirect.github.com/deiga) in [#1548](https://redirect.github.com/actions/setup-node/pull/1548) ##### Documentation updates: - Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#1536](https://redirect.github.com/actions/setup-node/pull/1536) - docs: Update restore-only cache documentation by [@priya-kinthali](https://redirect.github.com/priya-kinthali) in [#1550](https://redirect.github.com/actions/setup-node/pull/1550) - docs: Update caching recommendations to mitigate cache poisoning risks by [@chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#1567](https://redirect.github.com/actions/setup-node/pull/1567) ##### Dependency update: - Upgrade [@actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@jasongin](https://redirect.github.com/jasongin) in [#1569](https://redirect.github.com/actions/setup-node/pull/1569) ##### New Contributors - [@chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#1536](https://redirect.github.com/actions/setup-node/pull/1536) - [@deiga](https://redirect.github.com/deiga) made their first contribution in [#1548](https://redirect.github.com/actions/setup-node/pull/1548) - [@jasongin](https://redirect.github.com/jasongin) made their first contribution in [#1569](https://redirect.github.com/actions/setup-node/pull/1569) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0> ### [`v7`](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0) </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-cli).

Evaluation history

Date	Model	Scores	Action	Summary
2026-10-03 02:17 PM UTC	stealth/space-bunny-alpha	—	closed resolved	Renovate's actions/setup-node v6→v7 major bump merged into main via commit bb83cd8 (PR #474), updating .github/workflows/check-renovate.yaml with all CI checks green.
2026-09-25 09:46 AM UTC	stealth/space-bunny-alpha	—	closed resolved	Merged PR #474 in commit bb83cd8, updating actions/setup-node from v6 to v7; all reported CI checks passed.
2026-08-23 02:02 AM UTC	qwen/qwen3.6-35b-a3b	—	—	Automatically merged after passing all CI checks and receiving approval. Updated actions/setup-node from v6 to v7, applying ESM migration, new cache outputs, and security fixes.
2026-08-17 07:12 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 5 Confidence: 90	needs review	Updates the actions/setup-node GitHub Action from v6 to v7. The PR is fresh, contains a trivial one-line change, and has automerge enabled. CI is mostly passing except for a zizmor security linter failure.
2026-08-15 03:32 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 5 Confidence: 90	needs review	Updates actions/setup-node from v6 to v7. Currently awaiting maintainer review with one failing CI check (zizmor) and one pending status check.

Update history

Date	Change
2026-08-17 07:24 PM UTC	updated
2026-08-17 07:03 PM UTC	updated
2026-08-15 03:23 AM UTC	created

Related work

Related To: canonical/craft-cli#460 (confidence 40%)
Sibling Renovate PR bumping actions/checkout to v7 in the same workflow directory (commit 20cad57).

Related issues

Issue	Project	State	Summary	Similarity
#1014 build(deps): update actions/setup-node action to v7 (main)	craft-providers	closed	Merged the actions/setup-node v6→v7 Renovate update in commit ec52e07; check-renovate.yaml now uses actions/setup-node@v7.	94%
#168 build(deps): update github actions (main) (major)	debcraft	merged	Renovate's major actions/checkout v6→v7 bump was approved and merged into main via commit 62207a8, updating four workflow files (check-renovate, qa, release-publish, schema).	90%
#1142 build(deps): update actions/setup-node action to v7 (main)	craft-application	merged	Renovate PR #1142 bumping actions/setup-node from v6 to v7 in a CI workflow was approved and merged into main (1-line diff, automerge enabled).	90%
#175 build(deps): update actions/setup-node action to v7 (main)	debcraft	merged	Renovate's actions/setup-node v6→v7 bump was approved and merged into debcraft main via PR #175 (commit 54e0113), changing the action version in 2 files (+2/-2).	89%
#986 build(deps): update actions/checkout action to v7 (main)	craft-providers	merged	Renovate's actions/checkout v6→v7 major bump was approved and merged into main via commit 6939f1a; workflows check-renovate, release-publish and tests-weekly now pin actions/checkout@v7 (+4/-4).	89%
#127 build(deps): update actions/setup-node action to v5	craft-grammar	merged	Renovate PR merged via commit 55f8311, bumping actions/setup-node from v4 to v5 in .github/workflows/check-renovate.yaml (+1/-1 line). Approved by 2 reviewers, all CI checks passed.	87%
#203 build(deps): update actions/setup-node action to v7 (main)	craft-grammar	merged	Merged PR #203 upgraded actions/setup-node from v6 to v7 in main via commit 452a1a1.	87%
#255 build(deps): update actions/setup-node action to v7 (main)	craft-platforms	merged	Merged into main in commit 9ab7dda, updating actions/setup-node from v6 to v7 after approval and successful project CI checks.	86%
#196 build(deps): update github actions (main) (major)	craft-platforms	merged	Merged Renovate PR #196 into main, upgrading checkout, download-artifact, and setup-node to v6, upload-artifact to v5, and CI Node.js from 22 to 24.	86%
#896 build(deps): update actions/setup-node action to v5 (main)	craft-application	merged	Renovate PR merged into main, bumping actions/setup-node from v4 to v5 in a workflow file (+1/-1). Merged as commit 1e04e035 (later superseded by #1142 upgrading to v7).	86%