build(deps): update actions/setup-node action to v7 (main)
Metadata
Current evaluation
Merged the actions/setup-node v6→v7 Renovate update in commit ec52e07; check-renovate.yaml now uses actions/setup-node@v7.
Resolution: closed resolved
Reason: Commit ec52e07 records the setup-node v7 update with PR #1014 in its title, and the workflow now references actions/setup-node@v7.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v6` → `v7` |
---
### Release Notes
<details>
<summary>actions/setup-node (actions/setup-node)</summary>
### [`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
##### What's Changed
##### Enhancements:
- Add cache-primary-key and cache-matched-key as outputs by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1577](https://redirect.github.com/actions/setup-node/pull/1577)
- Migrate to ESM and upgrade dependencies by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1574](https://redirect.github.com/actions/setup-node/pull/1574)
##### Bug fixes:
- Remove dummy NODE\_AUTH\_TOKEN export by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1558](https://redirect.github.com/actions/setup-node/pull/1558)
- Only use `mirrorToken` in `getManifest` if it's provided by [@​deiga](https://redirect.github.com/deiga) in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
##### Documentation updates:
- Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- docs: Update restore-only cache documentation by [@​priya-kinthali](https://redirect.github.com/priya-kinthali) in [#​1550](https://redirect.github.com/actions/setup-node/pull/1550)
- docs: Update caching recommendations to mitigate cache poisoning risks by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1567](https://redirect.github.com/actions/setup-node/pull/1567)
##### Dependency update:
- Upgrade [@​actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://redirect.github.com/jasongin) in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
##### New Contributors
- [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- [@​deiga](https://redirect.github.com/deiga) made their first contribution in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
- [@​jasongin](https://redirect.github.com/jasongin) made their first contribution in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
**Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0>
</details>
---
### Configuration
📅 **Schedule**: (in timezone Etc/UTC)
- Branch creation
- "every weekend"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-providers).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42MS4zIiwidXBkYXRlZEluVmVyIjoiNDQuMTEyLjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbIlBSOiBEZXBlbmRlbmNpZXMiXX0=-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged the actions/setup-node v6→v7 Renovate update in commit ec52e07; check-renovate.yaml now uses actions/setup-node@v7. | |
| stealth/space-bunny-alpha | — | closed stale | Renovate's setup-node v6-to-v7 update was closed unmerged after zizmor and slow-test failures; no resolving merge or replacement change is documented. | |
| stealth/space-bunny-alpha |
Impact:
35
Quick Win:
13
Complexity:
20
Confidence:
87
Actionability:
45
|
needs review | Renovate proposes a one-line actions/setup-node v6→v7 workflow update. It is open and not merge-ready: zizmor fails, many test checks are pending, review has no reviewers, and one review comment remains unresolved. | |
| qwen/qwen3.6-35b-a3b |
Impact:
20
Quick Win:
19
Staleness:
5
Complexity:
5
Confidence:
80
|
keep open | Renovate-generated PR updating actions/setup-node from v6 to v7. One-line change across GitHub workflows. CI has one failing 'renovate' check. Automerge enabled. | |
| qwen/qwen3.6-35b-a3b |
Impact:
15
Quick Win:
14
Staleness:
10
Complexity:
5
Confidence:
75
|
keep open | Renovate PR updating actions/setup-node from v6 to v7. Minimal diff (+1/-1, 1 file). Automerge enabled. CI failing on renovate check. | |
| qwen/qwen3.6-35b-a3b |
Impact:
5
Quick Win:
5
Staleness:
15
Complexity:
5
Confidence:
85
|
needs review | Automated dependency update from actions/setup-node v6 to v7, with passing CI and automerge enabled. | |
| qwen/qwen3.6-35b-a3b |
Impact:
20
Quick Win:
18
Staleness:
5
Complexity:
10
Confidence:
85
|
keep open | Renovate PR updating actions/setup-node from v6 to v7. All CI checks passing, automerge enabled. | |
| qwen/qwen3.6-35b-a3b |
Impact:
10
Quick Win:
10
Staleness:
5
Complexity:
5
Confidence:
90
|
keep open | Renovate PR updating actions/setup-node from v6 to v7 in GitHub workflows. All CI checks passing, automerge enabled. | |
| qwen/qwen3.6-35b-a3b |
Impact:
15
Quick Win:
14
Staleness:
5
Complexity:
5
Confidence:
85
|
keep open | Renovate PR updating actions/setup-node from v6 to v7. Simple 1-line change, automerge enabled, CI mostly passing with one Renovate-specific check failing. | |
| qwen/qwen3.6-35b-a3b |
Impact:
15
Quick Win:
14
Staleness:
5
Complexity:
5
Confidence:
85
|
keep open | Renovate PR updating actions/setup-node from v6 to v7. Very recent (2 days old), minimal change (+1/-1 line), automerge enabled, CI mostly passing except one Renovate check. | |
| qwen3.6-35b-a3b-mtp-q6 |
Impact:
20
Quick Win:
20
Staleness:
0
Complexity:
0
Confidence:
90
|
needs review | Renovate PR updating actions/setup-node GitHub Action from v6 to v7. All CI checks passing, automerge enabled, 0 reviewers. |
Update history
| Date | Change |
|---|---|
| closed | |
| updated | |
| updated | |
| updated | |
| updated | |
| updated | |
| updated | |
| updated | |
| updated | |
| updated | |
| updated | |
| updated | |
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #474 build(deps): update actions/setup-node action to v7 (main) | craft-cli | merged | Renovate's actions/setup-node v6→v7 major bump merged into main via commit bb83cd8 (PR #474), updating .github/workflows/check-renovate.yaml with all CI checks green. | |
| #203 build(deps): update actions/setup-node action to v7 (main) | craft-grammar | merged | Merged PR #203 upgraded actions/setup-node from v6 to v7 in main via commit 452a1a1. | |
| #255 build(deps): update actions/setup-node action to v7 (main) | craft-platforms | merged | Merged into main in commit 9ab7dda, updating actions/setup-node from v6 to v7 after approval and successful project CI checks. | |
| #175 build(deps): update actions/setup-node action to v7 (main) | debcraft | merged | Renovate's actions/setup-node v6→v7 bump was approved and merged into debcraft main via PR #175 (commit 54e0113), changing the action version in 2 files (+2/-2). | |
| #1142 build(deps): update actions/setup-node action to v7 (main) | craft-application | merged | Renovate PR #1142 bumping actions/setup-node from v6 to v7 in a CI workflow was approved and merged into main (1-line diff, automerge enabled). | |
| #896 build(deps): update actions/setup-node action to v5 (main) | craft-application | merged | Renovate PR merged into main, bumping actions/setup-node from v4 to v5 in a workflow file (+1/-1). Merged as commit 1e04e035 (later superseded by #1142 upgrading to v7). | |
| #212 build(deps): update actions/setup-node action to v6 (main) | craft-archives | merged | Renovate PR #212 bumped actions/setup-node from v5 to v6 in craft-archives; approved with all CI checks green and merged into main via commit c4ef420. Superseded later by setup-node v7 pin. | |
| #1654 build(deps): update actions/setup-node action to v7 (main) | craft-parts | closed | Renovate's setup-node v6-to-v7 PR was closed unmerged because maintainers expected a Starbase update to provide the upgrade. | |
| #28 build(deps): update actions/setup-node action to v6 (main) - autoclosed | debcraft | closed | Renovate's setup-node v6 update was autoclosed; the identical change later merged via canonical/debcraft#454 in commit cc5af24. | |
| #44 build(deps): update actions/setup-node action to v6 (main) - autoclosed | craft-artifacts | closed | Renovate's setup-node v5→v6 bump PR #44 was autoclosed without merging; the same major Actions upgrade landed via merged PR #48 (commit b045f91), which also bumped download-artifact and upload-artifact. |