build(deps): update actions/setup-node action to v7 (main)

Metadata

Project: debcraft
Number: #175
Type: pull request
State: merged
Author: renovate[bot]
Labels: PR: Dependencies
Created: 2026-07-18 08:08 AM UTC
Updated: 2026-07-24 04:13 PM UTC
Closed: 2026-07-24 04:11 PM UTC

Current evaluation

Renovate's actions/setup-node v6→v7 bump was approved and merged into debcraft main via PR #175 (commit 54e0113), changing the action version in 2 files (+2/-2).

Resolution: closed resolved

Reason: The dependency update PR itself was merged into main as commit 54e0113 after approval from one reviewer with test/lint/policy checks green, delivering the setup-node v6 to v7 upgrade.

Evaluated by: mr-cal-bot

No scores available.

Issue body

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-node (actions/setup-node)</summary> ### [`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.0.0) ##### What's Changed ##### Enhancements: - Add cache-primary-key and cache-matched-key as outputs by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1577](https://redirect.github.com/actions/setup-node/pull/1577) - Migrate to ESM and upgrade dependencies by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1574](https://redirect.github.com/actions/setup-node/pull/1574) ##### Bug fixes: - Remove dummy NODE\_AUTH\_TOKEN export by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1558](https://redirect.github.com/actions/setup-node/pull/1558) - Only use `mirrorToken` in `getManifest` if it's provided by [@deiga](https://redirect.github.com/deiga) in [#1548](https://redirect.github.com/actions/setup-node/pull/1548) ##### Documentation updates: - Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#1536](https://redirect.github.com/actions/setup-node/pull/1536) - docs: Update restore-only cache documentation by [@priya-kinthali](https://redirect.github.com/priya-kinthali) in [#1550](https://redirect.github.com/actions/setup-node/pull/1550) - docs: Update caching recommendations to mitigate cache poisoning risks by [@chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#1567](https://redirect.github.com/actions/setup-node/pull/1567) ##### Dependency update: - Upgrade [@actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@jasongin](https://redirect.github.com/jasongin) in [#1569](https://redirect.github.com/actions/setup-node/pull/1569) ##### New Contributors - [@chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#1536](https://redirect.github.com/actions/setup-node/pull/1536) - [@deiga](https://redirect.github.com/deiga) made their first contribution in [#1548](https://redirect.github.com/actions/setup-node/pull/1548) - [@jasongin](https://redirect.github.com/jasongin) made their first contribution in [#1569](https://redirect.github.com/actions/setup-node/pull/1569) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0> ### [`v7`](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0) </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/debcraft).

Evaluation history

Date	Model	Scores	Action	Summary
2026-10-03 02:09 PM UTC	stealth/space-bunny-alpha	—	closed resolved	Renovate's actions/setup-node v6→v7 bump was approved and merged into debcraft main via PR #175 (commit 54e0113), changing the action version in 2 files (+2/-2).
2026-10-03 02:09 PM UTC	stealth/space-bunny-alpha	—	closed resolved	Renovate PR merged (commit 54e0113), bumping actions/setup-node from v6 to v7 in debcraft's main branch. Approved with no unresolved review comments; all test/lint jobs passed (OSV-scanner failed but did not block merge).
2026-09-25 09:39 AM UTC	stealth/space-bunny-alpha	—	closed resolved	Merged PR #175 (commit 54e0113), upgrading actions/setup-node from v6 to v7 in main. The approved Renovate update passed CI and was merged.
2026-07-31 02:13 AM UTC	qwen3.6-35b-a3b-mtp-q6	—	—	Merged automated dependency update upgrading actions/setup-node from v6 to v7. Approved by one reviewer, passed CI checks, and merged to main. Includes ESM migration, new cache outputs, and bug fixes.
2026-07-23 02:19 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 5 Confidence: 85	needs review	Updates actions/setup-node from v6 to v7. Currently pending maintainer review with automerge enabled. All CI checks pass except OSV-scanner.
2026-07-22 12:22 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 5 Confidence: 85	needs review	Updates actions/setup-node from v6 to v7. Generated by Renovate with automerge enabled. CI is mostly passing except for a failing OSV-scanner check. Awaiting maintainer review.
2026-07-18 08:15 AM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 0 Complexity: 5 Confidence: 95	needs review	Updates the GitHub Actions setup-node dependency from v6 to v7.0.0. Generated by Renovate with automerge enabled. Currently awaiting CI checks and initial maintainer review.

Update history

Date	Change
2026-07-24 04:13 PM UTC	updated
2026-07-22 05:03 PM UTC	updated
2026-07-21 09:55 AM UTC	updated
2026-07-21 12:51 AM UTC	updated
2026-07-18 08:08 AM UTC	created

Related work

Related To: canonical/craft-parts#1654 (confidence 60%)
Same Renovate v6→v7 update in a sibling repo; there it was closed unmerged pending a Starbase update, showing the update is not automatic everywhere.
Related To: canonical/snapcraft#6371 (confidence 55%)
Parallel setup-node v6→v7 Renovate bump merged in the snapcraft repo.

Related issues

Issue	Project	State	Summary	Similarity
#1142 build(deps): update actions/setup-node action to v7 (main)	craft-application	merged	Renovate PR #1142 bumping actions/setup-node from v6 to v7 in a CI workflow was approved and merged into main (1-line diff, automerge enabled).	92%
#1014 build(deps): update actions/setup-node action to v7 (main)	craft-providers	closed	Merged the actions/setup-node v6→v7 Renovate update in commit ec52e07; check-renovate.yaml now uses actions/setup-node@v7.	90%
#203 build(deps): update actions/setup-node action to v7 (main)	craft-grammar	merged	Merged PR #203 upgraded actions/setup-node from v6 to v7 in main via commit 452a1a1.	90%
#212 build(deps): update actions/setup-node action to v6 (main)	craft-archives	merged	Renovate PR #212 bumped actions/setup-node from v5 to v6 in craft-archives; approved with all CI checks green and merged into main via commit c4ef420. Superseded later by setup-node v7 pin.	90%
#474 build(deps): update actions/setup-node action to v7 (main)	craft-cli	merged	Renovate's actions/setup-node v6→v7 major bump merged into main via commit bb83cd8 (PR #474), updating .github/workflows/check-renovate.yaml with all CI checks green.	89%
#255 build(deps): update actions/setup-node action to v7 (main)	craft-platforms	merged	Merged into main in commit 9ab7dda, updating actions/setup-node from v6 to v7 after approval and successful project CI checks.	89%
#896 build(deps): update actions/setup-node action to v5 (main)	craft-application	merged	Renovate PR merged into main, bumping actions/setup-node from v4 to v5 in a workflow file (+1/-1). Merged as commit 1e04e035 (later superseded by #1142 upgrading to v7).	88%
#44 build(deps): update actions/setup-node action to v6 (main) - autoclosed	craft-artifacts	closed	Renovate's setup-node v5→v6 bump PR #44 was autoclosed without merging; the same major Actions upgrade landed via merged PR #48 (commit b045f91), which also bumped download-artifact and upload-artifact.	88%
#28 build(deps): update actions/setup-node action to v6 (main) - autoclosed	debcraft	closed	Renovate's setup-node v6 update was autoclosed; the identical change later merged via canonical/debcraft#454 in commit cc5af24.	88%
#204 build(deps): update actions/setup-node action to v5 (main)	craft-archives	merged	Renovate PR merged into main via commit 8675e0a, bumping actions/setup-node from v4 to v5 (1 file, +1/-1). Approved by 2 reviewers with all CI checks passing; later superseded by #212 (commit c4ef420) upgrading to v6.	87%