← Back to issue list

build(deps): update github actions to v7 (main)

View original Github issue

Metadata

Project
craft-store
Number
#407
Type
pull request
State
merged
Author
renovate[bot]
Labels
PR: Dependencies
Created
Updated
Closed

Current evaluation

Merged PR #407 via commit 5b6e8f7, upgrading actions/setup-node and actions/setup-python from v6 to v7 in CI workflows.

Resolution: closed resolved

Reason: PR #407 was merged into main as commit 5b6e8f7, applying both GitHub Actions v7 version bumps.

Evaluated by: mr-cal-bot

No scores available.

Issue body

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v6` → `v7` | | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-node (actions/setup-node)</summary> ### [`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.0.0) ##### What's Changed ##### Enhancements: - Add cache-primary-key and cache-matched-key as outputs by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1577](https://redirect.github.com/actions/setup-node/pull/1577) - Migrate to ESM and upgrade dependencies by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1574](https://redirect.github.com/actions/setup-node/pull/1574) ##### Bug fixes: - Remove dummy NODE\_AUTH\_TOKEN export by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1558](https://redirect.github.com/actions/setup-node/pull/1558) - Only use `mirrorToken` in `getManifest` if it's provided by [@&#8203;deiga](https://redirect.github.com/deiga) in [#&#8203;1548](https://redirect.github.com/actions/setup-node/pull/1548) ##### Documentation updates: - Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@&#8203;chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#&#8203;1536](https://redirect.github.com/actions/setup-node/pull/1536) - docs: Update restore-only cache documentation by [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in [#&#8203;1550](https://redirect.github.com/actions/setup-node/pull/1550) - docs: Update caching recommendations to mitigate cache poisoning risks by [@&#8203;chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#&#8203;1567](https://redirect.github.com/actions/setup-node/pull/1567) ##### Dependency update: - Upgrade [@&#8203;actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@&#8203;jasongin](https://redirect.github.com/jasongin) in [#&#8203;1569](https://redirect.github.com/actions/setup-node/pull/1569) ##### New Contributors - [@&#8203;chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#&#8203;1536](https://redirect.github.com/actions/setup-node/pull/1536) - [@&#8203;deiga](https://redirect.github.com/deiga) made their first contribution in [#&#8203;1548](https://redirect.github.com/actions/setup-node/pull/1548) - [@&#8203;jasongin](https://redirect.github.com/jasongin) made their first contribution in [#&#8203;1569](https://redirect.github.com/actions/setup-node/pull/1569) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0> ### [`v7`](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0) </details> <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v7.0.0`](https://redirect.github.com/actions/setup-python/compare/v6.3.0...v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v7.0.0...v7.0.0) ### [`v7`](https://redirect.github.com/actions/setup-python/compare/v6.3.0...v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v6.3.0...v7.0.0) </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-store). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI3NS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJQUjogRGVwZW5kZW5jaWVzIl19-->

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #407 via commit 5b6e8f7, upgrading actions/setup-node and actions/setup-python from v6 to v7 in CI workflows.
stealth/space-bunny-alpha — closed resolved Merged in canonical/craft-store#568 (commit 7c9407b), upgrading actions/setup-node and actions/setup-python from v6 to v7.
qwen3.6-35b-a3b-mtp-q6 — — Merged automated dependency update upgrading actions/setup-node and actions/setup-python from v6 to v7. Approved by reviewer, passed CI checks, and merged to main.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 10
Confidence: 85
needs review Updates GitHub Actions setup-node and setup-python to v7. Generated by Renovate with automerge enabled. CI passes most checks but OSV-scanner reports a security issue. Awaiting maintainer review.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 90
needs review Updates GitHub Actions setup-node and setup-python to v7. Generated by Renovate with automerge enabled. CI is mostly passing except for a failing OSV-scanner check. Awaiting maintainer review.
qwen3.6-35b-a3b-mtp-q6
Staleness: 5
Complexity: 5
Confidence: 95
needs review Updates the actions/setup-node GitHub Action from v6 to v7. Generated by Renovate, currently awaiting CI checks and initial maintainer review before automated merge.

Update history

Date Change
updated
updated
updated
updated
updated
updated
created

Related issues

Issue Project State Summary Similarity
#2847 build(deps): update github actions to v7 (main) charmcraft merged Renovate PR #2847 merged into main, bumping actions/setup-go, setup-node and setup-python from v6 to v7 across 4 CI workflow files (+4/-4 lines).
93%
#568 build(deps): update github actions to v7 (main) starbase merged Renovate PR #568 was merged via commit 7c9407b, upgrading actions/checkout from v6 to v7 in three GitHub Actions workflow files after approval and with all CI checks passing.
90%
#257 build(deps): update actions/setup-python action to v7 (main) craft-platforms merged Merged PR #257 in commit f47075a, updating actions/setup-python from v6 to v7 with all CI checks passing.
90%
#389 build(deps): update github actions (main) (major) craft-store merged Merged PR #389 in commit 4741edc, upgrading actions/checkout from v6 to v7 across three GitHub Actions workflow files.
90%
#203 build(deps): update actions/setup-node action to v7 (main) craft-grammar merged Merged PR #203 upgraded actions/setup-node from v6 to v7 in main via commit 452a1a1.
88%
#6487 build(deps): update github actions (main) snapcraft merged Merged PR #6487 updating actions/setup-node to v7.1.0 and taiki-e/install-action to v2.87.28. All CI checks passed.
88%
#1232 build(deps): update github actions (main) craft-application merged Renovate PR updating GitHub Actions: setup-node v7.0.0→v7.1.0, setup-uv v10.3.0→v10.3.2, pypi-publish digest, install-action v2.87.26→v2.87.30. CI has failing tests.
88%
#168 build(deps): update github actions (major) craft-platforms merged Merged as commit 94f9693, upgrading actions/setup-node v4→v5 and actions/setup-python v5→v6 after all CI checks passed.
87%
#1142 build(deps): update actions/setup-node action to v7 (main) craft-application merged Renovate PR #1142 bumping actions/setup-node from v6 to v7 in a CI workflow was approved and merged into main (1-line diff, automerge enabled).
87%
#255 build(deps): update actions/setup-node action to v7 (main) craft-platforms merged Merged into main in commit 9ab7dda, updating actions/setup-node from v6 to v7 after approval and successful project CI checks.
87%