This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| actions/setup-node | action | major | v3 → v7 |
Release Notes
actions/setup-node
v7.1.0
What's Changed
Enhancements:
- Add support for mise.toml file by @gperdomor in #1421
- Support absolute paths in node-version-file by @v-mahabaleshwars in #1633
Bug fixes:
- Add Node version validation and manifest fetch retry by @v-jitenderpalsingh in #1580
Documentation updates:
- README.md: bump actions/checkout to latest version 7 by @deining in #1578
- docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @v-gowridurgad in #1593
- Fixed cache recommendation syntax by @SubJunk in #1603
Dependency updates:
- Update workflow pins and migrate Node matrices to modern versions by @v-HarithaVattikuti in #1583
- Upgrade @actions/cache to 6.2.0 by @philip-gai in #1584
- Pin @types/node to v24 by @v-priyagupta108 in #1585
- Override brace-expansion to 5.0.8 by @v-priyagupta108 with @Copilot in #1599
- Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in #1598
- Upgrade prettier from 3.8.4 to 3.9.6 by @dependabot in #1590
- Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in #1610
- Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @dependabot in #1602
- Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @dependabot in #1629
- Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in #1616
- Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in #1615
- Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @dependabot in #1631
- Upgrade jest-each from 30.4.1 to 30.5.2 by @dependabot in #1636
- Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @dependabot in #1638
- Update dependencies and add license files by @v-HarithaVattikuti in #1642
- Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @dependabot in #1635
New Contributors
- @v-jitenderpalsingh made their first contribution in #1580
- @philip-gai made their first contribution in #1584
- @gperdomor made their first contribution in #1421
- @SubJunk made their first contribution in #1603
Full Changelog: https://github.com/actions/setup-node/compare/v7.0.0...v7.1.0
v7.0.0
What's Changed
Enhancements:
- Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
- Migrate to ESM and upgrade dependencies by @gowridurgad in #1574
Bug fixes:
- Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
- Only use
mirrorTokeningetManifestif it's provided by @deiga in #1548
Documentation updates:
- Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
- docs: Update restore-only cache documentation by @priya-kinthali in #1550
- docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567
Dependency update:
- Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569
New Contributors
- @chiranjib-swain made their first contribution in #1536
- @deiga made their first contribution in #1548
- @jasongin made their first contribution in #1569
Full Changelog: https://github.com/actions/setup-node/compare/v6...v7.0.0
v6.5.0
What's Changed
- Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579
Full Changelog: https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0
v6.4.0
What's Changed
Dependency updates:
- Upgrade @actions dependencies by @Copilot in #1525
- Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in #1533
New Contributors
Full Changelog: https://github.com/actions/setup-node/compare/v6...v6.4.0
v6.3.0
What's Changed
Enhancements:
When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.
Dependency updates:
- Fix npm audit issues by @gowridurgad in #1491
- Replace uuid with crypto.randomUUID() by @trivikr in #1378
- Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498
Bug fixes:
- Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
- Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495
New Contributors
Full Changelog: https://github.com/actions/setup-node/compare/v6...v6.3.0
v6.2.0
What's Changed
Documentation
- Documentation update related to absence of Lockfile by @mahabaleshwars in #1454
- Correct mirror option typos by @MikeMcC399 in #1442
- Readme update on checkout version v6 by @deining in #1446
- Readme typo fixes @munyari in #1226
- Advanced document update on checkout version v6 by @aparnajyothi-y in #1468
Dependency updates:
- Upgrade @actions/cache to v5.0.1 by @salmanmkc in #1449
New Contributors
- @mahabaleshwars made their first contribution in #1454
- @MikeMcC399 made their first contribution in #1442
- @deining made their first contribution in #1446
- @munyari made their first contribution in #1226
Full Changelog: https://github.com/actions/setup-node/compare/v6...v6.2.0
v6.1.0
What's Changed
Enhancement:
- Remove always-auth configuration handling by @priyagupta108 in #1436
Dependency updates:
- Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
- Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
- Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435
Documentation update:
- Add example for restore-only cache in documentation by @aparnajyothi-y in #1419
Full Changelog: https://github.com/actions/setup-node/compare/v6...v6.1.0
v6.0.0
What's Changed
Breaking Changes
- Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374
Dependency Upgrades
- Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
- Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
- Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362
Full Changelog: https://github.com/actions/setup-node/compare/v5...v6.0.0
v5.0.0
What's Changed
Breaking Changes
- Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348
This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false
steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
with:
package-manager-cache: false- Upgrade action to use node24 by @salmanmkc in #1325
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Dependency Upgrades
- Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
- Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
- Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
- Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
- Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345
New Contributors
- @priya-kinthali made their first contribution in #1348
- @salmanmkc made their first contribution in #1325
Full Changelog: https://github.com/actions/setup-node/compare/v4...v5.0.0
v4.4.0
What's Changed
Bug fixes:
- Make eslint-compact matcher compatible with Stylelint by @FloEdelmann in #98
- Add support for indented eslint output by @fregante in #1245
Enhancement:
- Support private mirrors by @marco-ippolito in #1240
Dependency update:
- Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in #1262
New Contributors
- @FloEdelmann made their first contribution in #98
- @fregante made their first contribution in #1245
- @marco-ippolito made their first contribution in #1240
Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.4.0
v4.3.0
What's Changed
Dependency updates
- Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in #1200
- Upgrade @action/cache from 4.0.0 to 4.0.2 by @gowridurgad in #1251
- Upgrade @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in #1203
- Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot in #1220
New Contributors
- @gowridurgad made their first contribution in #1251
Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.3.0
v4.2.0
What's Changed
- Enhance workflows and upgrade publish-actions from 0.2.2 to 0.3.0 by @aparnajyothi-y in #1174
- Add recommended permissions section to readme by @benwells in #1193
- Configure Dependabot settings by @HarithaVattikuti in #1192
- Upgrade
@actions/cacheto^4.0.0by @priyagupta108 in #1191 - Upgrade pnpm/action-setup from 2 to 4 by @dependabot in #1194
- Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in #1195
- Upgrade semver from 7.6.0 to 7.6.3 by @dependabot in #1196
- Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot in #1201
- Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in #1205
New Contributors
- @benwells made their first contribution in #1193
Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.2.0
v4.1.0
What's Changed
- Resolve High Security Alerts by upgrading Dependencies by @aparnajyothi-y in #1132
- Upgrade IA Publish by @Jcambass in #1134
- Revise
isGheslogic by @jww3 in #1148 - Add architecture to cache key by @pengx17 in #843 This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts. Note: This change may break previous cache keys as they will no longer be compatible with the new format.
New Contributors
Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.1.0
v4.0.4
What's Changed
- Add workflow file for publishing releases to immutable action package by @Jcambass in #1125
- Enhance Windows ARM64 Setup and Update micromatch Dependency by @priyagupta108 in #1126
Documentation changes:
- Documentation update in the README file by @suyashgaonkar in #1106
- Correct invalid 'lts' version string reference by @fulldecent in #1124
New Contributors
- @suyashgaonkar made their first contribution in #1106
- @priyagupta108 made their first contribution in #1126
- @Jcambass made their first contribution in #1125
- @fulldecent made their first contribution in #1124
Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.0.4
v4.0.3
What's Changed
Bug fixes:
- Fix macos latest check failures by @HarithaVattikuti in #1041
Documentation changes:
- Documentation update to update default Node version to 20 by @bengreeley in #949
Dependency updates:
- Bump undici from 5.26.5 to 5.28.3 by @dependabot in #965
- Bump braces from 3.0.2 to 3.0.3 and other dependency updates by @dependabot in #1087
New Contributors
- @bengreeley made their first contribution in #949
- @HarithaVattikuti made their first contribution in #1041
Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.0.3
v4.0.2
What's Changed
- Add support for
volta.extendsby @ThisIsManta in #921 - Add support for arm64 Windows by @dmitry-shibanov in #927
New Contributors
- @ThisIsManta made their first contribution in #921
Full Changelog: https://github.com/actions/setup-node/compare/v4.0.1...v4.0.2
v4.0.1
What's Changed
- Ignore engines in Yarn 1 e2e-cache tests by @trivikr in #882
- Update setup-node references in the README.md file to setup-node@v4 by @jwetzell in #884
- Update reusable workflows to use Node.js v20 by @MaksimZhukov in #889
- Add fix for cache to resolve slow post action step by @aparnajyothi-y in #917
- Fix README.md by @takayamaki in #898
- Add
package.jsontonode-version-filelist of examples. by @TWiStErRob in #879 - Fix node-version-file interprets entire package.json as a version by @NullVoxPopuli in #865
New Contributors
- @trivikr made their first contribution in #882
- @jwetzell made their first contribution in #884
- @aparnajyothi-y made their first contribution in #917
- @takayamaki made their first contribution in #898
- @TWiStErRob made their first contribution in #879
- @NullVoxPopuli made their first contribution in #865
Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.0.1
v4.0.0
What's Changed
In scope of this release we changed version of node runtime for action from node16 to node20 and updated dependencies in #866
Besides, release contains such changes as:
- Upgrade actions/checkout to v4 by @gmembre-zenika in #868
- Update actions/checkout for documentation and yaml by @dmitry-shibanov in #876
New Contributors
- @gmembre-zenika made their first contribution in #868
Full Changelog: https://github.com/actions/setup-node/compare/v3...v4.0.0
v3.9.1
What's Changed
- Add workflow file for publishing releases to immutable action package by @aparnajyothi-y in #1281
Full Changelog: https://github.com/actions/setup-node/compare/v3...v3.9.1
v3.9.0
What's Changed
- Upgrade @actions/cache to 4.0.3 by @gowridurgad in #1270 In scope of this release we updated actions/cache package to ensure continued support and compatibility, as older versions of the package are now deprecated. For more information please refer to the toolkit/cache.
Full Changelog: https://github.com/actions/setup-node/compare/v3...v3.9.0
v3.8.2
What's Changed
- Update semver by @dmitry-shibanov in #861
- Update temp directory creation by @nikolai-laevskii in #859
- Bump @babel/traverse from 7.15.4 to 7.23.2 by @dependabot in #870
- Add notice about binaries not being updated yet by @nikolai-laevskii in #872
- Update toolkit cache and core by @dmitry-shibanov and @seongwon-privatenote in #875
Full Changelog: https://github.com/actions/setup-node/compare/v3...v3.8.2
v3.8.1
What's Changed
In scope of this release, the filter was removed within the cache-save step by @dmitry-shibanov in #831. It is filtered and checked in the toolkit/cache library.
Full Changelog: https://github.com/actions/setup-node/compare/v3...v3.8.1
v3.8.0
What's Changed
Bug fixes:
- Add check for existing paths by @dmitry-shibanov in #803
- Resolve SymbolicLink by @dmitry-shibanov in #809
- Change passing logic for cache input by @dmitry-shibanov in #816
- Fix armv7 cache issue by @louislam in #794
- Update check-dist workflow name by @sinchang in #710
Feature implementations:
Documentation changes:
- Refer to semver package name in README.md by @olleolleolle in #808
Update dependencies:
- Update toolkit cache to fix zstd by @dmitry-shibanov in #804
- Bump tough-cookie and @azure/ms-rest-js by @dependabot in #802
- Bump semver from 6.1.2 to 6.3.1 by @dependabot in #807
- Bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in #815
New Contributors
- @olleolleolle made their first contribution in #808
- @louislam made their first contribution in #794
- @sinchang made their first contribution in #710
- @xytis made their first contribution in #812
Full Changelog: https://github.com/actions/setup-node/compare/v3...v3.8.0
v3.7.0
What's Changed
In scope of this release we added a logic to save an additional cache path for yarn 3 (related pull request and feature request). Moreover, we added functionality to use all the sub directories derived from cache-dependency-path input and add detect all dependencies directories to cache (related pull request and feature request).
Besides, we made such changes as:
- Replace workflow badge with new badge by @jongwooo in #653
- Fix a minor typo by @phanan in #662
- docs: fix typo in advanced-usage.md by @remarkablemark in #697
- bugfix: Don't attempt to use Windows fallbacks on non-Windows OSes by @domdomegg in #718
- Update to node 18.x by @feelepxyz in #751
- Remove implicit dependencies by @nikolai-laevskii in #758
- Fix description about ensuring workflow access to private package by @x86chi in #704
New Contributors
- @jongwooo made their first contribution in #653
- @phanan made their first contribution in #662
- @remarkablemark made their first contribution in #697
- @domdomegg made their first contribution in #718
- @feelepxyz made their first contribution in #751
- @nikolai-laevskii made their first contribution in #758
- @x86chi made their first contribution in #704
Full Changelog: https://github.com/actions/setup-node/compare/v3...v3.7.0
v3.6.0: Add Support for Nightly, Canary and RC builds for Node.js
In scope of this release we added support to download nightly, rc (#611) and canary (#619) Node.js distributions.
For nightly versions:
jobs:
build:
runs-on: ubuntu-latest
name: Node sample
steps:
- uses: actions/checkout@v3
- uses: actions/setup-node@v3
with:
node-version: '16-nightly'
- run: npm ci
- run: npm testFor canary versions:
jobs:
build:
runs-on: ubuntu-latest
name: Node sample
steps:
- uses: actions/checkout@v3
- uses: actions/setup-node@v3
with:
node-version: '16-v8-canary’
- run: npm ci
- run: npm testFor rc versions:
jobs:
build:
runs-on: ubuntu-latest
name: Node sample
steps:
- uses: actions/checkout@v3
- uses: actions/setup-node@v3
with:
node-version: '16.0.0-rc.1’
- run: npm ci
- run: npm testNote: For more examples please refer to documentation.
Besides, we added the following changes as:
- Updated minimatch: #608
- Fixed extra newline character in version output when reading from a file: #625
- Passed the token input through on GHES: #595
- Fixed issue with scoped registries are duplicated in npmrc: #637
v3.5.1: Update @actions/core and Print Node, Npm, Yarn versions
In scope of this release we updated actions/core to 1.10.0. Moreover, we added logic to print Nodejs, Npm, Yarn versions after installation.
v3.5.0: Add support for engines.node and Volta
In scope of this release we add support for engines.node. The action will be able to grab the version form package.json#engines.node. #485. Moreover, we added support for Volta
Besides, we updated @actions/core to 1.9.1 and @actions/cache to 3.0.4
v3.4.1: Fix pnpm output and node-version output issues
In scope of this release we fixed bugs related to the pnpm 7.5.1 output issue from pnpm store path #545. Moreover we fixed the issue with falling on node-version output #540.
v3.4.0: Add support for asdf format and update actions/cache version to 3.0.0
In scope of this release we updated actions/cache package as the new version contains fixes for caching error handling. Moreover, we added support for asdf format as Node.js version file #373. Besides, we introduced new output node-version and added npm-shrinkwrap.json to dependency file patterns: #439
v3.3.0: Add support for lts/-n aliases
In scope of this release we added support for lts/-n aliases, improve logic for current, latest and node aliases to handle them from toolcache, update ncc package.
Support of lts/-n aliases
steps:
- uses: actions/checkout@v3
- uses: actions/setup-node@v3
with:
node-version: lts/-1
- run: npm ci
- run: npm testMinor improvements
v3.2.0: Add current, node, latest aliases
In scope of this release we added new aliases to install the latest Node.js version. #483
steps:
- uses: actions/checkout@v3
- uses: actions/setup-node@v3
with:
node-version: current
- run: npm ci
- run: npm testv3.1.1: Update actions/cache version to 2.0.2
In scope of this release we updated actions/cache package as the new version contains fixes related to GHES 3.5 (#460)
v3.1.0: Add caching support on GHES 3.5
In scope of this release we added support for caching from GHES 3.5 and fixed download issue for files > 2GB during restore. Besides, we updated actions/cache dependency to 2.0.0 version.
Configuration
📅 Schedule: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.