build(deps): update actions/setup-node action to v7 (main)
Metadata
Current evaluation
Renovate's setup-node v6-to-v7 PR was closed unmerged because maintainers expected a Starbase update to provide the upgrade.
Resolution: closed superseded
Reason: Maintainer @lengau closed the PR on 2026-07-22, stating that "a starbase update will get it." No standalone setup-node v7 change was merged from #1654.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v6` β `v7` |
---
### Release Notes
<details>
<summary>actions/setup-node (actions/setup-node)</summary>
### [`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.0.0)
##### What's Changed
##### Enhancements:
- Add cache-primary-key and cache-matched-key as outputs by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1577](https://redirect.github.com/actions/setup-node/pull/1577)
- Migrate to ESM and upgrade dependencies by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1574](https://redirect.github.com/actions/setup-node/pull/1574)
##### Bug fixes:
- Remove dummy NODE\_AUTH\_TOKEN export by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1558](https://redirect.github.com/actions/setup-node/pull/1558)
- Only use `mirrorToken` in `getManifest` if it's provided by [@​deiga](https://redirect.github.com/deiga) in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
##### Documentation updates:
- Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- docs: Update restore-only cache documentation by [@​priya-kinthali](https://redirect.github.com/priya-kinthali) in [#​1550](https://redirect.github.com/actions/setup-node/pull/1550)
- docs: Update caching recommendations to mitigate cache poisoning risks by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1567](https://redirect.github.com/actions/setup-node/pull/1567)
##### Dependency update:
- Upgrade [@​actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://redirect.github.com/jasongin) in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
##### New Contributors
- [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- [@​deiga](https://redirect.github.com/deiga) made their first contribution in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
- [@​jasongin](https://redirect.github.com/jasongin) made their first contribution in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
**Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0>
### [`v7`](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
</details>
---
### Configuration
π
**Schedule**: (in timezone Etc/UTC)
- Branch creation
- "every weekend"
- Automerge
- At any time (no schedule defined)
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
π **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-parts).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI3Mi40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJQUjogRGVwZW5kZW5jaWVzIl19-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | β | closed superseded | Renovate's setup-node v6-to-v7 PR was closed unmerged because maintainers expected a Starbase update to provide the upgrade. | |
| stealth/space-bunny-alpha | β | closed superseded | Renovateβs setup-node v6βv7 update was closed unmerged; @lengau said a Starbase update would provide the upgrade, and Renovate disabled future v7 PRs. | |
| qwen3.6-35b-a3b-mtp-q6 | β | β | Updating actions/setup-node to v7 was closed without merging. The change was abandoned because a starbase update will handle it instead. Renovate will ignore future v7 releases unless manually upgraded. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
95
|
needs review | Updates actions/setup-node GitHub Action from v6 to v7. Generated by Renovate with automerge enabled. All CI checks are passing, and the change is minimal (1 file, +1/-1 lines). | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
0
Complexity:
10
Confidence:
90
|
keep open | Automated dependency update upgrading actions/setup-node from v6 to v7. PR is fresh, automerge is enabled, and awaits CI validation. |
Update history
| Date | Change |
|---|---|
| closed | |
| updated | |
| updated | |
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #175 build(deps): update actions/setup-node action to v7 (main) | debcraft | merged | Renovate's actions/setup-node v6βv7 bump was approved and merged into debcraft main via PR #175 (commit 54e0113), changing the action version in 2 files (+2/-2). | |
| #1142 build(deps): update actions/setup-node action to v7 (main) | craft-application | merged | Renovate PR #1142 bumping actions/setup-node from v6 to v7 in a CI workflow was approved and merged into main (1-line diff, automerge enabled). | |
| #454 build(deps): update actions/setup-node action to v6 | starbase | merged | Renovate dependency bump of actions/setup-node from v5 to v6 merged into starbase main via commit cc5af24 (PR #454), with all CI checks passing. | |
| #1014 build(deps): update actions/setup-node action to v7 (main) | craft-providers | closed | Merged the actions/setup-node v6βv7 Renovate update in commit ec52e07; check-renovate.yaml now uses actions/setup-node@v7. | |
| #203 build(deps): update actions/setup-node action to v7 (main) | craft-grammar | merged | Merged PR #203 upgraded actions/setup-node from v6 to v7 in main via commit 452a1a1. | |
| #439 build(deps): update actions/setup-node action to v5 | starbase | merged | Renovate PR #439 bumped actions/setup-node from v4 to v5 in starbase's CI workflows; approved with all checks green and merged into main as commit 8df6d82. Later superseded by #454 (v6). | |
| #44 build(deps): update actions/setup-node action to v6 (main) - autoclosed | craft-artifacts | closed | Renovate's setup-node v5βv6 bump PR #44 was autoclosed without merging; the same major Actions upgrade landed via merged PR #48 (commit b045f91), which also bumped download-artifact and upload-artifact. | |
| #28 build(deps): update actions/setup-node action to v6 (main) - autoclosed | debcraft | closed | Renovate's setup-node v6 update was autoclosed; the identical change later merged via canonical/debcraft#454 in commit cc5af24. | |
| #474 build(deps): update actions/setup-node action to v7 (main) | craft-cli | merged | Renovate's actions/setup-node v6βv7 major bump merged into main via commit bb83cd8 (PR #474), updating .github/workflows/check-renovate.yaml with all CI checks green. | |
| #255 build(deps): update actions/setup-node action to v7 (main) | craft-platforms | merged | Merged into main in commit 9ab7dda, updating actions/setup-node from v6 to v7 after approval and successful project CI checks. |