build(deps): update actions/setup-node action to v7 (main)
Metadata
Current evaluation
Automatically merged after passing all CI checks and receiving approval. Updated actions/setup-node from v6 to v7, applying ESM migration, new cache outputs, and security fixes.
Suggested action: —
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v6` → `v7` |
---
### Release Notes
<details>
<summary>actions/setup-node (actions/setup-node)</summary>
### [`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.0.0)
##### What's Changed
##### Enhancements:
- Add cache-primary-key and cache-matched-key as outputs by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1577](https://redirect.github.com/actions/setup-node/pull/1577)
- Migrate to ESM and upgrade dependencies by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1574](https://redirect.github.com/actions/setup-node/pull/1574)
##### Bug fixes:
- Remove dummy NODE\_AUTH\_TOKEN export by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1558](https://redirect.github.com/actions/setup-node/pull/1558)
- Only use `mirrorToken` in `getManifest` if it's provided by [@​deiga](https://redirect.github.com/deiga) in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
##### Documentation updates:
- Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- docs: Update restore-only cache documentation by [@​priya-kinthali](https://redirect.github.com/priya-kinthali) in [#​1550](https://redirect.github.com/actions/setup-node/pull/1550)
- docs: Update caching recommendations to mitigate cache poisoning risks by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1567](https://redirect.github.com/actions/setup-node/pull/1567)
##### Dependency update:
- Upgrade [@​actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://redirect.github.com/jasongin) in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
##### New Contributors
- [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- [@​deiga](https://redirect.github.com/deiga) made their first contribution in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
- [@​jasongin](https://redirect.github.com/jasongin) made their first contribution in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
**Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0>
### [`v7`](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
</details>
---
### Configuration
📅 **Schedule**: (in timezone Etc/UTC)
- Branch creation
- "every weekend"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-cli).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yOS41IiwidXBkYXRlZEluVmVyIjoiNDQuMjkuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUFI6IERlcGVuZGVuY2llcyJdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Automatically merged after passing all CI checks and receiving approval. Updated actions/setup-node from v6 to v7, applying ESM migration, new cache outputs, and security fixes. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
90
|
needs review | Updates the actions/setup-node GitHub Action from v6 to v7. The PR is fresh, contains a trivial one-line change, and has automerge enabled. CI is mostly passing except for a zizmor security linter failure. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
90
|
needs review | Updates actions/setup-node from v6 to v7. Currently awaiting maintainer review with one failing CI check (zizmor) and one pending status check. |
Update history
| Date | Change |
|---|---|
| updated | |
| updated | |
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #175 build(deps): update actions/setup-node action to v7 (main) | debcraft | merged | Merged automated dependency update upgrading actions/setup-node from v6 to v7. Approved by one reviewer, passed CI checks, and merged to main. Includes ESM migration, new cache outputs, and bug fixes. | |
| #6371 build(deps): update actions/setup-node action to v7 (main) | snapcraft | merged | Merged automated dependency update upgrading actions/setup-node from v6 to v7. The change was auto-merged to main after passing required CI checks, introducing ESM migration, new cache outputs, and bug fixes. | |
| #255 build(deps): update actions/setup-node action to v7 (main) | craft-platforms | merged | Merged automated update upgrading actions/setup-node from v6 to v7. Approved by one reviewer and passing CI checks, it was automatically merged into main via Renovate. The v7 release migrates to ESM, adds cache key outputs, and includes bug fixes. | |
| #1014 build(deps): update actions/setup-node action to v7 (main) | craft-providers | open | Automated dependency update from actions/setup-node v6 to v7, with passing CI and automerge enabled. | |
| #1142 build(deps): update actions/setup-node action to v7 (main) | craft-application | merged | Merged automated dependency update upgrading the actions/setup-node GitHub Action from v6 to v7. Applied via Renovate bot with automerge enabled, the change passed CI checks and was successfully merged to the main branch. | |
| #203 build(deps): update actions/setup-node action to v7 (main) | craft-grammar | merged | Merged automated dependency update upgrading the actions/setup-node GitHub Action from v6 to v7. The change modified one file with a single line update, passed all CI checks, and was automatically merged to the main branch by Renovate. | |
| #86 chore(deps): update actions/setup-node action to v7 | craft-actions | merged | Merged automated dependency update upgrading actions/setup-node from v6.4.0 to v7.0.0. Approved by one reviewer and passed all CI checks. The major release migrates to ESM, adds cache key outputs, fixes bugs, and updates documentation. | |
| #454 build(deps): update actions/setup-node action to v6 | starbase | merged | Merged automated dependency update upgrading the actions/setup-node GitHub Action from v5 to v6. Approved by two reviewers, passed all CI checks, and merged via Renovate bot's automerge feature. | |
| #212 build(deps): update actions/setup-node action to v6 (main) | craft-archives | merged | Merged to main. The Renovate bot automated updating the actions/setup-node GitHub Action from v5 to v6. The single-line change passed all CI checks and received two approvals before automatic merge. | |
| #407 build(deps): update github actions to v7 (main) | craft-store | merged | Merged automated dependency update upgrading actions/setup-node and actions/setup-python from v6 to v7. Approved by reviewer, passed CI checks, and merged to main. |