build(deps): update actions/setup-node action to v7 (main)
Metadata
Current evaluation
Automated dependency update from actions/setup-node v6 to v7, with passing CI and automerge enabled.
Suggested action: needs review
Reason: This is a routine Renovate-generated dependency update (+1/-1 lines) with all CI checks passing and automerge enabled. It requires a maintainer review to approve the v7 upgrade before it can be merged.
Impact:
5
Quick Win:
4.75
Staleness:
15
Complexity:
5
Confidence:
85
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v6` → `v7` |
---
### Release Notes
<details>
<summary>actions/setup-node (actions/setup-node)</summary>
### [`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
##### What's Changed
##### Enhancements:
- Add cache-primary-key and cache-matched-key as outputs by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1577](https://redirect.github.com/actions/setup-node/pull/1577)
- Migrate to ESM and upgrade dependencies by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1574](https://redirect.github.com/actions/setup-node/pull/1574)
##### Bug fixes:
- Remove dummy NODE\_AUTH\_TOKEN export by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1558](https://redirect.github.com/actions/setup-node/pull/1558)
- Only use `mirrorToken` in `getManifest` if it's provided by [@​deiga](https://redirect.github.com/deiga) in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
##### Documentation updates:
- Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- docs: Update restore-only cache documentation by [@​priya-kinthali](https://redirect.github.com/priya-kinthali) in [#​1550](https://redirect.github.com/actions/setup-node/pull/1550)
- docs: Update caching recommendations to mitigate cache poisoning risks by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1567](https://redirect.github.com/actions/setup-node/pull/1567)
##### Dependency update:
- Upgrade [@​actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://redirect.github.com/jasongin) in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
##### New Contributors
- [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- [@​deiga](https://redirect.github.com/deiga) made their first contribution in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
- [@​jasongin](https://redirect.github.com/jasongin) made their first contribution in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
**Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0>
</details>
---
### Configuration
📅 **Schedule**: (in timezone Etc/UTC)
- Branch creation
- "every weekend"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-providers).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42MS4zIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUFI6IERlcGVuZGVuY2llcyJdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b |
Impact:
5
Quick Win:
4.75
Staleness:
15
Complexity:
5
Confidence:
85
|
needs review | Automated dependency update from actions/setup-node v6 to v7, with passing CI and automerge enabled. | |
| qwen/qwen3.6-35b-a3b |
Impact:
20
Quick Win:
18.0
Staleness:
5
Complexity:
10
Confidence:
85
|
keep open | Renovate PR updating actions/setup-node from v6 to v7. All CI checks passing, automerge enabled. | |
| qwen/qwen3.6-35b-a3b |
Impact:
10
Quick Win:
9.5
Staleness:
5
Complexity:
5
Confidence:
90
|
keep open | Renovate PR updating actions/setup-node from v6 to v7 in GitHub workflows. All CI checks passing, automerge enabled. | |
| qwen/qwen3.6-35b-a3b |
Impact:
15
Quick Win:
14.25
Staleness:
5
Complexity:
5
Confidence:
85
|
keep open | Renovate PR updating actions/setup-node from v6 to v7. Simple 1-line change, automerge enabled, CI mostly passing with one Renovate-specific check failing. | |
| qwen/qwen3.6-35b-a3b |
Impact:
15
Quick Win:
14.25
Staleness:
5
Complexity:
5
Confidence:
85
|
keep open | Renovate PR updating actions/setup-node from v6 to v7. Very recent (2 days old), minimal change (+1/-1 line), automerge enabled, CI mostly passing except one Renovate check. | |
| qwen3.6-35b-a3b-mtp-q6 |
Impact:
20
Quick Win:
20.0
Staleness:
0
Complexity:
0
Confidence:
90
|
needs review | Renovate PR updating actions/setup-node GitHub Action from v6 to v7. All CI checks passing, automerge enabled, 0 reviewers. |
Update history
| Date | Change |
|---|---|
| updated | |
| updated | |
| updated | |
| updated | |
| updated | |
| created |
Related work
-
Duplicate Of:
craft-parts#1654
(confidence 90%)
Identical dependency update PR opened across multiple canonical repositories simultaneously by Renovate.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1142 build(deps): update actions/setup-node action to v7 (main) | craft-application | merged | Merged automated dependency update upgrading the actions/setup-node GitHub Action from v6 to v7. Applied via Renovate bot with automerge enabled, the change passed CI checks and was successfully merged to the main branch. | |
| #203 build(deps): update actions/setup-node action to v7 (main) | craft-grammar | merged | Merged automated dependency update upgrading the actions/setup-node GitHub Action from v6 to v7. The change modified one file with a single line update, passed all CI checks, and was automatically merged to the main branch by Renovate. | |
| #6371 build(deps): update actions/setup-node action to v7 (main) | snapcraft | merged | Merged automated dependency update upgrading actions/setup-node from v6 to v7. The change was auto-merged to main after passing required CI checks, introducing ESM migration, new cache outputs, and bug fixes. | |
| #175 build(deps): update actions/setup-node action to v7 (main) | debcraft | merged | Merged automated dependency update upgrading actions/setup-node from v6 to v7. Approved by one reviewer, passed CI checks, and merged to main. Includes ESM migration, new cache outputs, and bug fixes. | |
| #474 build(deps): update actions/setup-node action to v7 (main) | craft-cli | merged | Automatically merged after passing all CI checks and receiving approval. Updated actions/setup-node from v6 to v7, applying ESM migration, new cache outputs, and security fixes. | |
| #255 build(deps): update actions/setup-node action to v7 (main) | craft-platforms | merged | Merged automated update upgrading actions/setup-node from v6 to v7. Approved by one reviewer and passing CI checks, it was automatically merged into main via Renovate. The v7 release migrates to ESM, adds cache key outputs, and includes bug fixes. | |
| #407 build(deps): update github actions to v7 (main) | craft-store | merged | Merged automated dependency update upgrading actions/setup-node and actions/setup-python from v6 to v7. Approved by reviewer, passed CI checks, and merged to main. | |
| #454 build(deps): update actions/setup-node action to v6 | starbase | merged | Merged automated dependency update upgrading the actions/setup-node GitHub Action from v5 to v6. Approved by two reviewers, passed all CI checks, and merged via Renovate bot's automerge feature. | |
| #212 build(deps): update actions/setup-node action to v6 (main) | craft-archives | merged | Merged to main. The Renovate bot automated updating the actions/setup-node GitHub Action from v5 to v6. The single-line change passed all CI checks and received two approvals before automatic merge. | |
| #5802 build(deps): update actions/setup-node action to v5 (main) | snapcraft | merged | Merged automated dependency update upgrading the actions/setup-node GitHub Action from v4 to v5. All CI checks passed, and the change was merged to main. |