Skip to content

chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 - #703

Open
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/github_actions/staging/actions/setup-node-7.0.0
Open

chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0#703
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/github_actions/staging/actions/setup-node-7.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/setup-node from 6.4.0 to 7.0.0.

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 2, 2026
@dependabot
dependabot Bot requested a review from izadoesdev as a code owner September 2, 2026 04:13
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 2, 2026
@vercel

vercel Bot commented Sep 2, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
dashboard Ready Ready Preview Sep 4, 2026 12:43pm UTC
databuddy-status Ready Ready Preview Sep 4, 2026 12:43pm UTC
documentation Ready Ready Preview Sep 4, 2026 12:43pm UTC

@unkey-deploy

unkey-deploy Bot commented Sep 2, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Unkey Deploy

Name Status Preview Inspect Updated (UTC)
links (preview) Ready Visit Preview Inspect Sep 4, 2026 12:42pm

@tripwire-sh tripwire-sh Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

blocked — it touches a protected workflow file.

@tripwire-sh

tripwire-sh Bot commented Sep 2, 2026

Copy link
Copy Markdown

blocked@dependabot[bot], this can't merge yet.

it touches a protected workflow file

View on Tripwire

how do i fix this?

fix those and push again — this comment updates itself. no need to reopen the pull request or ping anyone.

if you think this is wrong, say so in a comment here and a maintainer will decide.

what is tripwire?

a firewall for open-source repos. the maintainers here set rules that every change has to clear before it can merge — account age, rate limits, hidden links, that kind of thing. org members are exempt.

nothing is hidden: the run page shows every rule this change hit, the evidence, and the verdict.

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@48b55a0...8207627)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/staging/actions/setup-node-7.0.0 branch from dd14b26 to 406d1c2 Compare September 4, 2026 12:42

@tripwire-sh tripwire-sh Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

blocked — it touches a protected workflow file.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants