From e5b778cdb5c196b1da17ddf8ab895a57d4f43946 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 14 Sep 2026 19:33:46 +0000 Subject: [PATCH 1/2] chore(deps): bump actions/setup-node from 6 to 7 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/lint.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/update-copilot-nodejs.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 7ade42cb..a7951b7b 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -27,7 +27,7 @@ jobs: - uses: actions/checkout@v7 - name: Set up release tooling runtime id: node - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: 22 - name: Install pinned release tooling outside repository diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 151c2bc9..17604507 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -47,7 +47,7 @@ jobs: - name: Set up release tooling runtime id: node - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: 22 diff --git a/.github/workflows/update-copilot-nodejs.yaml b/.github/workflows/update-copilot-nodejs.yaml index 0570aa95..1479da83 100644 --- a/.github/workflows/update-copilot-nodejs.yaml +++ b/.github/workflows/update-copilot-nodejs.yaml @@ -112,7 +112,7 @@ jobs: - name: Set up release tooling runtime id: node if: steps.update.outputs.required == 'true' - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: 22 From 96c696a815fca624534c29bcc760cd9bd3294721 Mon Sep 17 00:00:00 2001 From: Antoine Gaudreau Simard Date: Fri, 23 Oct 2026 14:27:15 -0400 Subject: [PATCH 2/2] test(ci): accept setup-node v7 in release workflows --- tests/scripts/test_release_workflow.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/scripts/test_release_workflow.rb b/tests/scripts/test_release_workflow.rb index 35cc3542..0a801779 100644 --- a/tests/scripts/test_release_workflow.rb +++ b/tests/scripts/test_release_workflow.rb @@ -111,7 +111,7 @@ def events(w) check(job['steps'].any? { |s| s['run'].to_s.lines.map(&:strip).include?('node --test tests/scripts/test_release_pr.cjs') }, 'Run real Manifest tests in updater and Lint CI') end [writer, up, l['jobs'].fetch('release_automation')].each do |job| - check(step(job, 'node')['uses'] == 'actions/setup-node@v6' && step(job, 'node').dig('with', 'node-version') == 22, 'Explicit Node test/tool runtime') + check(step(job, 'node')['uses'] == 'actions/setup-node@v7' && step(job, 'node').dig('with', 'node-version') == 22, 'Explicit Node test/tool runtime') install = step(job, 'release_deps')['run'] check(install.lines.map(&:strip).include?('npm install --prefix "$RUNNER_TEMP/release-please" --no-save --package-lock=false --ignore-scripts release-please@17.6.0'), 'Pin public API dependency, disable scripts, install outside repository') check(install.lines.map(&:strip).include?('echo "NODE_PATH=$RUNNER_TEMP/release-please/node_modules" >> "$GITHUB_ENV"'), 'Expose temporary dependency to following steps')