chore(deps): update actions/setup-node action to v7 by renovate[bot] · Pull Request #67 · sgort/linked-data-explorer

renovate · 2026-09-02T09:07:13Z

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	major	`v4.4.0` → `v7.0.0`

Release Notes

actions/setup-node (actions/setup-node)

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
Migrate to ESM and upgrade dependencies by @gowridurgad in #1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
Only use mirrorToken in getManifest if it's provided by @deiga in #1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
docs: Update restore-only cache documentation by @priya-kinthali in #1550
docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569

New Contributors

@chiranjib-swain made their first contribution in #1536
@deiga made their first contribution in #1548
@jasongin made their first contribution in #1569

Full Changelog: actions/setup-node@v6...v7.0.0

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

`v6.4.0`

Compare Source

What's Changed

Dependency updates:

Upgrade @actions dependencies by @Copilot in #1525
Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in #1533

New Contributors

@Copilot made their first contribution in #1525

Full Changelog: actions/setup-node@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Documentation

Documentation update related to absence of Lockfile by @mahabaleshwars in #1454
Correct mirror option typos by @MikeMcC399 in #1442
Readme update on checkout version v6 by @deining in #1446
Readme typo fixes @munyari in #1226
Advanced document update on checkout version v6 by @aparnajyothi-y in #1468

Dependency updates:

Upgrade @actions/cache to v5.0.1 by @salmanmkc in #1449

New Contributors

@mahabaleshwars made their first contribution in #1454
@MikeMcC399 made their first contribution in #1442
@deining made their first contribution in #1446
@munyari made their first contribution in #1226

Full Changelog: actions/setup-node@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-09-02T09:11:07Z

Azure Static Web Apps: Your stage site is ready! Visit it here: https://brave-bay-04f351e03-67.westeurope.4.azurestaticapps.net

github-actions · 2026-09-03T12:27:10Z

Azure Static Web Apps: Your stage site is ready! Visit it here: https://brave-bay-04f351e03-67.westeurope.4.azurestaticapps.net

github-actions · 2026-09-07T22:07:41Z

Azure Static Web Apps: Your stage site is ready! Visit it here: https://brave-bay-04f351e03-67.westeurope.4.azurestaticapps.net

github-actions · 2026-09-08T09:43:29Z

Azure Static Web Apps: Your stage site is ready! Visit it here: https://brave-bay-04f351e03-67.westeurope.4.azurestaticapps.net

… bump Renovate maintains workflow pins and their version comments together; it does not touch SECURITY-PIPELINE.md. check-supply-chain reported the gap on this branch: [register] actions/setup-node: workflow pins 820762786026… (v7.0.0) but SECURITY-PIPELINE.md records only 49933ea5288c… (v4.4.0) note: SECURITY-PIPELINE.md lists actions/setup-node at 49933ea5288c… (v4.4.0), which no workflow currently uses Pin truth passed — the digest resolves to the version its comment claims. Only the register was stale. Second exercise of the habit recorded under "Keeping this register true": the register moves on the bump's branch, before merging, so the check is green on the pull request rather than only on acc afterwards. Unlike the checkout bump in #66, nothing in the surrounding prose went stale with it. Two passages were checked and both still hold: - "Version currency" discusses the node-version INPUT ('22' backend, '20' frontend), not the action pin, so this bump does not touch it. - The zizmor.yml comment on the config-validator step says it reuses the setup-node pin this repository already carries, so Renovate maintains one digest rather than two. All five references move together, so that remains true. Worth stating because it marks the check's limit: it verifies the table, and nothing verifies the prose around it. #66 needed a human to notice three stale passages. This one genuinely did not.

github-actions · 2026-09-08T10:21:29Z

Azure Static Web Apps: Your stage site is ready! Visit it here: https://brave-bay-04f351e03-67.westeurope.4.azurestaticapps.net

renovate Bot added the dependencies label Sep 2, 2026

renovate Bot force-pushed the renovate/actions-setup-node-7.x branch from 87b8caf to ad96f7a Compare September 3, 2026 12:23

renovate Bot force-pushed the renovate/actions-setup-node-7.x branch from ad96f7a to 63b9828 Compare September 7, 2026 22:03

This was referenced Sep 8, 2026

ci: adopt check-supply-chain as a non-blocking step in the audit job #77

Merged

Promote check-supply-chain from non-blocking to blocking #78

Closed

renovate Bot force-pushed the renovate/actions-setup-node-7.x branch from 63b9828 to 160997f Compare September 8, 2026 09:39

chore(deps): update actions/setup-node action to v7

e0b7d88

renovate Bot force-pushed the renovate/actions-setup-node-7.x branch from 160997f to e0b7d88 Compare September 8, 2026 10:15

sgort merged commit 2244c95 into acc Sep 8, 2026
3 checks passed

sgort deleted the renovate/actions-setup-node-7.x branch September 8, 2026 10:32

Navigation Menu

chore(deps): update actions/setup-node action to v7 - #67

chore(deps): update actions/setup-node action to v7#67
sgort merged 2 commits into
accfrom
renovate/actions-setup-node-7.x

renovate Bot commented Sep 2, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 2, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 7, 2026

Uh oh!

github-actions Bot commented Sep 8, 2026

Uh oh!

github-actions Bot commented Sep 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

What's Changed

What's Changed

Dependency updates:

New Contributors

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

What's Changed

Documentation

Dependency updates:

New Contributors

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

Configuration

Uh oh!

github-actions Bot commented Sep 2, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 7, 2026

Uh oh!

github-actions Bot commented Sep 8, 2026

Uh oh!

github-actions Bot commented Sep 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Sep 2, 2026 •

edited

Loading