ci(deps): bump actions/setup-node from 4.4.0 to 6.4.0#214
Merged
Conversation
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Contributor
|
| Field | Value |
|---|---|
| Action | actions/setup-node |
| Previous | v4.4.0 |
| New | v6.4.0 |
| Type | Major (v4 → v6) |
Breaking Changes
- Breaking Changes
-
- Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
-
Breaking Changes
Release Notes (v5 → v6)
v6.4.0
What's Changed
Dependency updates:
- Upgrade @actions dependencies by @Copilot in Upgrade @actions dependencies actions/setup-node#1525
- Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in Update Node.js versions in versions.yml and bump package to v6.4.0 actions/setup-node#1533
New Contributors
- @Copilot made their first contribution in Upgrade @actions dependencies actions/setup-node#1525
Full Changelog: actions/setup-node@v6...v6.4.0
v6.3.0
What's Changed
Enhancements:
- Support parsing
devEnginesfield by @susnux in feat(node-version-file): support parsingdevEnginesfield actions/setup-node#1283
When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.
Dependency updates:
- Fix npm audit issues by @gowridurgad in Fix npm audit issues actions/setup-node#1491
- Replace uuid with crypto.randomUUID() by @trivikr in Replace uuid with crypto.randomUUID() actions/setup-node#1378
- Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in Bump minimatch from 3.1.2 to 3.1.5 actions/setup-node#1498
Bug fixes:
- Remove hardcoded bearer for mirror-url @marco-ippolito in fix: remove hardcoded bearer actions/setup-node#1467
- Scope test lockfiles by package manager and update cache tests by @gowridurgad in Scope test lockfiles by package manager and update cache tests actions/setup-node#1495
New Contributors
- @susnux made their first contribution in feat(node-version-file): support parsing
devEnginesfield actions/setup-node#1283
Full Changelog: actions/setup-node@v6...v6.3.0
v6.2.0
What's Changed
Documentation
- Documentation update related to absence of Lockfile by @mahabaleshwars in Update Documentation for Lockfile actions/setup-node#1454
- Correct mirror option typos by @MikeMcC399 in Correct mirror option typos actions/setup-node#1442
- Readme update on checkout version v6 by @deining in README.md: bump to latest released checkout version v6 actions/setup-node#1446
- Readme typo fixes @munyari in Fix README typo actions/setup-node#1226
- Advanced document update on checkout version v6 by @aparnajyothi-y in Docs: bump actions/checkout from v5 to v6 actions/setup-node#1468
Dependency updates:
- Upgrade @actions/cache to v5.0.1 by @salmanmkc in Bump @actions/cache to v5.0.1 actions/setup-node#1449
New Contributors
- @mahabaleshwars made their first contribution in Update Documentation for Lockfile actions/setup-node#1454
- @MikeMcC399 made their first contribution in Correct mirror option typos actions/setup-node#1442
- @deining made their first contribution in README.md: bump to latest released checkout version v6 actions/setup-node#1446
- @munyari made their first contribution in Fix README typo actions/setup-node#1226
Full Changelog: actions/setup-node@v6...v6.2.0
v6.1.0
What's Changed
Enhancement:
- Remove always-auth configuration handling by @priyagupta108 in Remove always-auth configuration handling from action actions/setup-node#1436
Dependency updates:
- Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in Bump @actions/cache from 4.0.3 to 4.1.0 actions/setup-node#1384
- Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in Bump actions/checkout from 5 to 6 actions/setup-node#1439
- Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in Bump js-yaml from 3.14.1 to 3.14.2 actions/setup-node#1435
Documentation update:
- Add example for restore-only cache in documentation by @aparnajyothi-y in Add example for restore-only cache in documentation actions/setup-node#1419
Full Changelog: actions/setup-node@v6...v6.1.0
v6.0.0
What's Changed
Breaking Changes
- Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in Limit automatic caching to npm, update workflows and documentation actions/setup-node#1374
Dependency Upgrades
- Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
- Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
- Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362
Full Changelog: actions/setup-node@v5...v6.0.0
v5.0.0
What's Changed
Breaking Changes
- Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in Enhance caching in setup-node with automatic package manager detection actions/setup-node#1348
This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false
steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
with:
package-manager-cache: false- Upgrade action to use node24 by @salmanmkc in Upgrade action to use node24 actions/setup-node#1325
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Dependency Upgrades
- Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in Bump @octokit/request-error and @actions/github actions/setup-node#1227
- Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in Bump uuid from 9.0.1 to 11.1.0 actions/setup-node#1273
- Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in Bump undici from 5.28.5 to 5.29.0 actions/setup-node#1295
- Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in Bump form-data to bring in fix for critical vulnerability actions/setup-node#1332
- Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in Bump actions/checkout from 4 to 5 actions/setup-node#1345
New Contributors
- @priya-kinthali made their first contribution in Enhance caching in setup-node with automatic package manager detection actions/setup-node#1348
- @salmanmkc made their first contribution in Upgrade action to use node24 actions/setup-node#1325
Full Changelog: actions/setup-node@v4...v5.0.0
Next Steps
- Review breaking changes above
- Check if workflow inputs/outputs changed
- Verify compatibility with your CI/CD configuration
Full changelog: https://github.com/actions/setup-node/releases
Generated automatically for Dependabot major version PRs.
commit: |
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4.4.0 to 6.4.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@49933ea...48b55a0) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions/setup-node-6.4.0
branch
from
4e5c6ad to
d90cea6
Compare
4 tasks
jpr5
added a commit
that referenced
this pull request
May 15, 2026
…nts (#220) ## Summary - Strip `@username` mentions from upstream release notes before posting as PR comments - Prevents notification spam to external open-source contributors - Preserves `@scope/pkg`, `email@domain`, and `action@version` patterns Closes #216 ## Test plan - [x] Regex tested against real spam comment from aimock PR #214 (44 mentions stripped, 0 collateral damage) - [x] YAML code refs (`checkout@v5`) preserved - [x] npm scopes (`@actions/cache`) preserved - [x] Email patterns preserved
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps actions/setup-node from 4.4.0 to 6.4.0.
Release notes
Sourced from actions/setup-node's releases.
... (truncated)
Commits
48b55a0Update Node.js versions in versions.yml and bump package to v6.4.0 (#1533)ab72c7eUpgrade@actionsdependencies (#1525)53b8394Bump minimatch from 3.1.2 to 3.1.5 (#1498)54045abScope test lockfiles by package manager and update cache tests (#1495)c882bffReplace uuid with crypto.randomUUID() (#1378)774c1d6feat(node-version-file): support parsingdevEnginesfield (#1283)efcb663fix: remove hardcoded bearer (#1467)d02c89dFix npm audit issues (#1491)6044e13Docs: bump actions/checkout from v5 to v6 (#1468)8e49463Fix README typo (#1226)