Skip to content

Bump actions/setup-node from 5.0.0 to 7.0.0 - #112

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-7.0.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-7.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •

Copy link
Copy Markdown

Bumps actions/setup-node from 5.0.0 to 7.0.0.

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

... (truncated)

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added component: ci Continuous integration and GitHub Actions workflows domain: supply-chain Dependencies, workflows, provenance, and publishing trust labels Jul 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-7.0.0 branch from 7fbdf3f to 0c52c78 Compare July 27, 2026 03:38
@dependabot dependabot Bot changed the title Bump actions/setup-node from 5.0.0 to 7.0.0 chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0 Jul 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-7.0.0 branch 2 times, most recently from 2b10a13 to 57eb2f6 Compare July 27, 2026 18:58
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@a0853c2...8207627)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0 Bump actions/setup-node from 5.0.0 to 7.0.0 Jul 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-7.0.0 branch from 57eb2f6 to 8c2c0cc Compare July 27, 2026 19:57
@plx plx mentioned this pull request Oct 21, 2026
5 of 6 tasks
plx added a commit that referenced this pull request Oct 21, 2026
Consolidate the open Dependabot proposals (#111, #112, #113, #115, #116,
#117, #129, #130, #138, #139) into one reviewed change.

Cargo: clap 4.6.6, log 0.4.34, thiserror 2.0, windows-sys 0.61 (unified,
dropping windows-sys 0.60.2 and the windows-targets 0.53 chain), and the syn
3.0 dev-dependency. Regenerate THIRD_PARTY_LICENSES.md and drop the
about.toml clarifications for crates no longer in the graph.

GitHub Actions: checkout v7.0.1, upload-artifact v7.0.1, setup-node v7.0.0,
upload-pages-artifact v5.0.0, deploy-pages v5.0.0, with the issue #61
checkout pin test and README CI example updated to match.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WUWzFoG6QJYfSytZacWniT

plx commented Oct 21, 2026

Copy link
Copy Markdown
Owner

Superseded by #145 (merged as 0077a2b), which applies setup-node v7.0.0 (82076278) together with the other open Dependabot updates.


Generated by Claude Code

@plx plx closed this Oct 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/setup-node-7.0.0 branch October 21, 2026 12:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

component: ci Continuous integration and GitHub Actions workflows domain: supply-chain Dependencies, workflows, provenance, and publishing trust

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant