build(deps): update actions/setup-node action to v7 (main)
Metadata
Current evaluation
Renovate PR #6371 was approved and merged into snapcraft main, bumping actions/setup-node from v6 to v7 in two CI workflow files (+2/-2). CI passed except integration-spread-tests-store and OSV-scanner (unrelated).
Resolution: closed resolved
Reason: The PR is in state merged with automerge enabled and one approving review, so the actions/setup-node v6 to v7 version bump in the two workflow files landed on the main branch via PR #6371.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v6` → `v7` |
---
### Release Notes
<details>
<summary>actions/setup-node (actions/setup-node)</summary>
### [`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.0.0)
##### What's Changed
##### Enhancements:
- Add cache-primary-key and cache-matched-key as outputs by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1577](https://redirect.github.com/actions/setup-node/pull/1577)
- Migrate to ESM and upgrade dependencies by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1574](https://redirect.github.com/actions/setup-node/pull/1574)
##### Bug fixes:
- Remove dummy NODE\_AUTH\_TOKEN export by [@​gowridurgad](https://redirect.github.com/gowridurgad) in [#​1558](https://redirect.github.com/actions/setup-node/pull/1558)
- Only use `mirrorToken` in `getManifest` if it's provided by [@​deiga](https://redirect.github.com/deiga) in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
##### Documentation updates:
- Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- docs: Update restore-only cache documentation by [@​priya-kinthali](https://redirect.github.com/priya-kinthali) in [#​1550](https://redirect.github.com/actions/setup-node/pull/1550)
- docs: Update caching recommendations to mitigate cache poisoning risks by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​1567](https://redirect.github.com/actions/setup-node/pull/1567)
##### Dependency update:
- Upgrade [@​actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://redirect.github.com/jasongin) in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
##### New Contributors
- [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- [@​deiga](https://redirect.github.com/deiga) made their first contribution in [#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
- [@​jasongin](https://redirect.github.com/jasongin) made their first contribution in [#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
**Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0>
### [`v7`](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
</details>
---
### Configuration
📅 **Schedule**: (in timezone Etc/UTC)
- Branch creation
- "every weekend"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/snapcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUFI6IERlcGVuZGVuY2llcyJdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR #6371 was approved and merged into snapcraft main, bumping actions/setup-node from v6 to v7 in two CI workflow files (+2/-2). CI passed except integration-spread-tests-store and OSV-scanner (unrelated). | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #6371 upgraded actions/setup-node from v6 to v7 across two workflow files after approval and successful required CI checks. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency update upgrading actions/setup-node from v6 to v7. The change was auto-merged to main after passing required CI checks, introducing ESM migration, new cache outputs, and bug fixes. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
10
Complexity:
5
Confidence:
90
|
needs review | Updates actions/setup-node GitHub Action from v6 to v7. CI checks are passing. Awaiting maintainer review or automatic merge. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
5
Complexity:
5
Confidence:
85
|
needs review | Updates actions/setup-node from v6 to v7. Generated by Renovate with automerge enabled. CI is mostly passing with two failing checks. Awaiting maintainer review. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
5
Complexity:
5
Confidence:
90
|
needs review | Updates actions/setup-node from v6 to v7. Generated by Renovate with automerge enabled. CI is mostly passing. Awaiting maintainer review. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
5
Complexity:
5
Confidence:
95
|
needs review | Updates actions/setup-node GitHub Action from v6 to v7. Generated by Renovate, automerge enabled, all CI checks passing, awaiting maintainer review. |
Update history
| Date | Change |
|---|---|
| updated | |
| updated | |
| updated | |
| updated | |
| created |
Related work
-
Related To:
canonical/craft-parts#1654
(confidence 55%)
Same Renovate setup-node v6 to v7 bump in a sibling Canonical repo, but closed unmerged there pending a Starbase update
-
Related To:
canonical/craft-platforms#255
(confidence 50%)
Identical Renovate setup-node v6 to v7 update merged in craft-platforms (commit 9ab7dda)
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1142 build(deps): update actions/setup-node action to v7 (main) | craft-application | merged | Renovate PR #1142 bumping actions/setup-node from v6 to v7 in a CI workflow was approved and merged into main (1-line diff, automerge enabled). | |
| #255 build(deps): update actions/setup-node action to v7 (main) | craft-platforms | merged | Merged into main in commit 9ab7dda, updating actions/setup-node from v6 to v7 after approval and successful project CI checks. | |
| #203 build(deps): update actions/setup-node action to v7 (main) | craft-grammar | merged | Merged PR #203 upgraded actions/setup-node from v6 to v7 in main via commit 452a1a1. | |
| #175 build(deps): update actions/setup-node action to v7 (main) | debcraft | merged | Renovate's actions/setup-node v6→v7 bump was approved and merged into debcraft main via PR #175 (commit 54e0113), changing the action version in 2 files (+2/-2). | |
| #6323 build(deps): update github actions (main) (major) | snapcraft | merged | Renovate PR #6323 merged into snapcraft main, bumping actions/checkout v5/v6→v7 and actions/download-artifact v5→v8 across 7 workflow files (+20/-20); approved by 2 reviewers. | |
| #2747 build(deps): update actions/checkout action to v7 (main) | charmcraft | merged | Renovate PR #2747 bumping actions/checkout from v6 to v7.0.0 across 9 workflow files (+17/-17) was approved and merged into main as commit c559e7ff; some snap-tests and OSV-scanner jobs failed but did not block the merge. | |
| #212 build(deps): update actions/setup-node action to v6 (main) | craft-archives | merged | Renovate PR #212 bumped actions/setup-node from v5 to v6 in craft-archives; approved with all CI checks green and merged into main via commit c4ef420. Superseded later by setup-node v7 pin. | |
| #1124 build(deps): update actions/checkout action to v7 (main) | craft-application | merged | Renovate PR canonical/craft-application#1124 merged into main, bumping actions/checkout from v6 to v7 across three workflow files (+4/-4). Approved by 2 reviewers; snap-tests (openstack) and OSV-scanner failures did not block automerge. | |
| #2847 build(deps): update github actions to v7 (main) | charmcraft | merged | Renovate PR #2847 merged into main, bumping actions/setup-go, setup-node and setup-python from v6 to v7 across 4 CI workflow files (+4/-4 lines). | |
| #204 build(deps): update actions/setup-node action to v5 (main) | craft-archives | merged | Renovate PR merged into main via commit 8675e0a, bumping actions/setup-node from v4 to v5 (1 file, +1/-1). Approved by 2 reviewers with all CI checks passing; later superseded by #212 (commit c4ef420) upgrading to v6. |