build(deps): update github actions to v7 (main)

Metadata

Project: craft-store
Number: #407
Type: pull request
State: merged
Author: renovate[bot]
Labels: PR: Dependencies
Created: 2026-07-18 06:36 AM UTC
Updated: 2026-07-24 04:13 PM UTC
Closed: 2026-07-24 04:10 PM UTC

Current evaluation

Merged automated dependency update upgrading actions/setup-node and actions/setup-python from v6 to v7. Approved by reviewer, passed CI checks, and merged to main.

Suggested action: —

No scores available.

Issue body

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v6` → `v7` | | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-node (actions/setup-node)</summary> ### [`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.0.0) ##### What's Changed ##### Enhancements: - Add cache-primary-key and cache-matched-key as outputs by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1577](https://redirect.github.com/actions/setup-node/pull/1577) - Migrate to ESM and upgrade dependencies by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1574](https://redirect.github.com/actions/setup-node/pull/1574) ##### Bug fixes: - Remove dummy NODE\_AUTH\_TOKEN export by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1558](https://redirect.github.com/actions/setup-node/pull/1558) - Only use `mirrorToken` in `getManifest` if it's provided by [@deiga](https://redirect.github.com/deiga) in [#1548](https://redirect.github.com/actions/setup-node/pull/1548) ##### Documentation updates: - Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#1536](https://redirect.github.com/actions/setup-node/pull/1536) - docs: Update restore-only cache documentation by [@priya-kinthali](https://redirect.github.com/priya-kinthali) in [#1550](https://redirect.github.com/actions/setup-node/pull/1550) - docs: Update caching recommendations to mitigate cache poisoning risks by [@chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#1567](https://redirect.github.com/actions/setup-node/pull/1567) ##### Dependency update: - Upgrade [@actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@jasongin](https://redirect.github.com/jasongin) in [#1569](https://redirect.github.com/actions/setup-node/pull/1569) ##### New Contributors - [@chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#1536](https://redirect.github.com/actions/setup-node/pull/1536) - [@deiga](https://redirect.github.com/deiga) made their first contribution in [#1548](https://redirect.github.com/actions/setup-node/pull/1548) - [@jasongin](https://redirect.github.com/jasongin) made their first contribution in [#1569](https://redirect.github.com/actions/setup-node/pull/1569) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0> ### [`v7`](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0) </details> <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v7.0.0`](https://redirect.github.com/actions/setup-python/compare/v6.3.0...v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v7.0.0...v7.0.0) ### [`v7`](https://redirect.github.com/actions/setup-python/compare/v6.3.0...v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v6.3.0...v7.0.0) </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-store).

Evaluation history

Date	Model	Scores	Action	Summary
2026-07-31 02:08 AM UTC	qwen3.6-35b-a3b-mtp-q6	—	—	Merged automated dependency update upgrading actions/setup-node and actions/setup-python from v6 to v7. Approved by reviewer, passed CI checks, and merged to main.
2026-07-23 02:19 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 10 Confidence: 85	needs review	Updates GitHub Actions setup-node and setup-python to v7. Generated by Renovate with automerge enabled. CI passes most checks but OSV-scanner reports a security issue. Awaiting maintainer review.
2026-07-22 12:21 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 5 Confidence: 90	needs review	Updates GitHub Actions setup-node and setup-python to v7. Generated by Renovate with automerge enabled. CI is mostly passing except for a failing OSV-scanner check. Awaiting maintainer review.
2026-07-18 06:46 AM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 5 Complexity: 5 Confidence: 95	needs review	Updates the actions/setup-node GitHub Action from v6 to v7. Generated by Renovate, currently awaiting CI checks and initial maintainer review before automated merge.

Update history

Date	Change
2026-07-24 04:13 PM UTC	updated
2026-07-22 05:09 PM UTC	updated
2026-07-22 04:46 PM UTC	updated
2026-07-22 08:10 AM UTC	updated
2026-07-21 05:32 PM UTC	updated
2026-07-21 05:02 AM UTC	updated
2026-07-18 06:36 AM UTC	created

Related issues

Issue	Project	State	Summary	Similarity
#257 build(deps): update actions/setup-python action to v7 (main)	craft-platforms	merged	Merged automated dependency update upgrading the actions/setup-python GitHub Action from v6 to v7. Approved by one reviewer with all CI checks passing on the main branch.	93%
#389 build(deps): update github actions (main) (major)	craft-store	merged	Merged automated dependency update upgrading actions/checkout from v6 to v7. Approved by one reviewer, passed all CI checks, and integrated into the main branch.	93%
#568 build(deps): update github actions to v7 (main)	starbase	merged	Merged after passing CI checks and approval, this automated dependency update upgrades the actions/checkout GitHub Action from v6 to v7.	92%
#2847 build(deps): update github actions to v7 (main)	charmcraft	merged	Merged automated dependency update upgrading GitHub Actions setup-go, setup-node, and setup-python from v6 to v7. The change was automatically merged via Renovate after passing required CI checks.	90%
#2514 build(deps): update github actions (main) (major)	charmcraft	merged	Merged automated dependency update upgrading GitHub Actions to v6/v7 and Node.js to v24. Approved by two reviewers. Non-blocking CI failures on older OS versions and type-checking warnings did not prevent successful merge.	88%
#1142 build(deps): update actions/setup-node action to v7 (main)	craft-application	merged	Merged automated dependency update upgrading the actions/setup-node GitHub Action from v6 to v7. Applied via Renovate bot with automerge enabled, the change passed CI checks and was successfully merged to the main branch.	88%
#578 build(deps): update github actions (main) (major)	starbase	merged	Merged automated dependency update for GitHub Actions. Renovate upgraded actions/setup-node to v7 and astral-sh/setup-uv to v9. Approved by one reviewer, passed all CI checks, and merged automatically with a two-line workflow change.	88%
#1014 build(deps): update actions/setup-node action to v7 (main)	craft-providers	open	Automated dependency update from actions/setup-node v6 to v7, with passing CI and automerge enabled.	88%
#6323 build(deps): update github actions (main) (major)	snapcraft	merged	Merged automated dependency updates via Renovate. Upgraded actions/checkout to v7 and actions/download-artifact to v8. Approved by reviewers and merged to main despite some failing integration tests.	88%
#161 build(deps): update github actions (main) (major)	craft-grammar	merged	Merged automated dependency update upgrading GitHub Actions download-artifact to v7 and upload-artifact to v6. All CI checks passed and changes were applied to main.	87%