[PR #27] [CLOSED] chore(deps): update actions/setup-node action to v6 #15

New issue

Closed

opened 2026-06-08 09:03:26 +00:00 by ryangr0 · 0 comments

ryangr0 commented 2026-06-08 09:03:26 +00:00

Owner

Copy link

📋 Pull Request Information

Original PR: https://github.com/webgrip/infrastructure/pull/27
Author: @webgrip-renovate[bot]
Created: 6/2/2026
Status: ❌ Closed

Base: main ← Head: renovate/actions-setup-node-6.x

---

📝 Commits (1)

• 2d3545d chore(deps): update actions/setup-node action to v6

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 .github/actions/semantic-release-monorepo/action.yml (+1 -1)

📄 Description

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	major	v4 → v6

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

actions/setup-node (actions/setup-node)

v6.4.0

Compare Source

What's Changed

Dependency updates:

• Upgrade @​actions dependencies by @​Copilot in #​1525
• Update Node.js versions in versions.yml and bump package to v6.4.0 by @​priya-kinthali in #​1533

New Contributors

• @​Copilot made their first contribution in #​1525

Full Changelog: https://github.com/actions/setup-node/compare/v6...v6.4.0

v6.3.0

Compare Source

What's Changed

Enhancements:

• Support parsing devEngines field by @​susnux in #​1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

• Fix npm audit issues by @​gowridurgad in #​1491
• Replace uuid with crypto.randomUUID() by @​trivikr in #​1378
• Upgrade minimatch from 3.1.2 to 3.1.5 by @​dependabot in #​1498

Bug fixes:

• Remove hardcoded bearer for mirror-url @​marco-ippolito in #​1467
• Scope test lockfiles by package manager and update cache tests by @​gowridurgad in #​1495

New Contributors

• @​susnux made their first contribution in #​1283

Full Changelog: https://github.com/actions/setup-node/compare/v6...v6.3.0

v6.2.0

Compare Source

What's Changed

Documentation

• Documentation update related to absence of Lockfile by @​mahabaleshwars in #​1454
• Correct mirror option typos by @​MikeMcC399 in #​1442
• Readme update on checkout version v6 by @​deining in #​1446
• Readme typo fixes @​munyari in #​1226
• Advanced document update on checkout version v6 by @​aparnajyothi-y in #​1468

Dependency updates:

• Upgrade @​actions/cache to v5.0.1 by @​salmanmkc in #​1449

New Contributors

• @​mahabaleshwars made their first contribution in #​1454
• @​MikeMcC399 made their first contribution in #​1442
• @​deining made their first contribution in #​1446
• @​munyari made their first contribution in #​1226

Full Changelog: https://github.com/actions/setup-node/compare/v6...v6.2.0

v6.1.0

Compare Source

What's Changed

Enhancement:

• Remove always-auth configuration handling by @​priyagupta108 in #​1436

Dependency updates:

• Upgrade @​actions/cache from 4.0.3 to 4.1.0 by @​dependabot[bot] in #​1384
• Upgrade actions/checkout from 5 to 6 by @​dependabot[bot] in #​1439
• Upgrade js-yaml from 3.14.1 to 3.14.2 by @​dependabot[bot] in #​1435

Documentation update:

• Add example for restore-only cache in documentation by @​aparnajyothi-y in #​1419

Full Changelog: https://github.com/actions/setup-node/compare/v6...v6.1.0

v6.0.0

Compare Source

What's Changed

Breaking Changes

• Limit automatic caching to npm, update workflows and documentation by @​priyagupta108 in #​1374

Dependency Upgrades

• Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @​dependabot[bot] in #​1336
• Upgrade prettier from 2.8.8 to 3.6.2 by @​dependabot[bot] in #​1334
• Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @​dependabot[bot] in #​1362

Full Changelog: https://github.com/actions/setup-node/compare/v5...v6.0.0

v6

Compare Source

v5.0.0

Compare Source

What's Changed

Breaking Changes

• Enhance caching in setup-node with automatic package manager detection by @​priya-kinthali in #​1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

• Upgrade action to use node24 by @​salmanmkc in #​1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

• Upgrade @​octokit/request-error and @​actions/github by @​dependabot[bot] in #​1227
• Upgrade uuid from 9.0.1 to 11.1.0 by @​dependabot[bot] in #​1273
• Upgrade undici from 5.28.5 to 5.29.0 by @​dependabot[bot] in #​1295
• Upgrade form-data to bring in fix for critical vulnerability by @​gowridurgad in #​1332
• Upgrade actions/checkout from 4 to 5 by @​dependabot[bot] in #​1345

New Contributors

• @​priya-kinthali made their first contribution in #​1348
• @​salmanmkc made their first contribution in #​1325

Full Changelog: https://github.com/actions/setup-node/compare/v4...v5.0.0

v5

Compare Source

v4.4.0

Compare Source

What's Changed

Bug fixes:

• Make eslint-compact matcher compatible with Stylelint by @​FloEdelmann in #​98
• Add support for indented eslint output by @​fregante in #​1245

Enhancement:

• Support private mirrors by @​marco-ippolito in #​1240

Dependency update:

• Upgrade @​action/cache from 4.0.2 to 4.0.3 by @​aparnajyothi-y in #​1262

New Contributors

• @​FloEdelmann made their first contribution in #​98
• @​fregante made their first contribution in #​1245
• @​marco-ippolito made their first contribution in #​1240

Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.4.0

v4.3.0

Compare Source

What's Changed

Dependency updates

• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in #​1200
• Upgrade @​action/cache from 4.0.0 to 4.0.2 by @​gowridurgad in #​1251
• Upgrade @​vercel/ncc from 0.38.1 to 0.38.3 by @​dependabot in #​1203
• Upgrade @​actions/tool-cache from 2.0.1 to 2.0.2 by @​dependabot in #​1220

New Contributors

• @​gowridurgad made their first contribution in #​1251

Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.3.0

v4.2.0

Compare Source

What's Changed

• Enhance workflows and upgrade publish-actions from 0.2.2 to 0.3.0 by @​aparnajyothi-y in #​1174
• Add recommended permissions section to readme by @​benwells in #​1193
• Configure Dependabot settings by @​HarithaVattikuti in #​1192
• Upgrade @actions/cache to ^4.0.0 by @​priyagupta108 in #​1191
• Upgrade pnpm/action-setup from 2 to 4 by @​dependabot in #​1194
• Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in #​1195
• Upgrade semver from 7.6.0 to 7.6.3 by @​dependabot in #​1196
• Upgrade @​types/jest from 29.5.12 to 29.5.14 by @​dependabot in #​1201
• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in #​1205

New Contributors

• @​benwells made their first contribution in #​1193

Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.2.0

v4.1.0

Compare Source

What's Changed

• Resolve High Security Alerts by upgrading Dependencies by @​aparnajyothi-y in #​1132
• Upgrade IA Publish by @​Jcambass in #​1134
• Revise isGhes logic by @​jww3 in #​1148
• Add architecture to cache key by @​pengx17 in #​843
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.

New Contributors

• @​jww3 made their first contribution in #​1148
• @​pengx17 made their first contribution in #​843

Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.1.0

v4.0.4

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​1125
• Enhance Windows ARM64 Setup and Update micromatch Dependency by @​priyagupta108 in #​1126

Documentation changes:

• Documentation update in the README file by @​suyashgaonkar in #​1106
• Correct invalid 'lts' version string reference by @​fulldecent in #​1124

New Contributors

• @​suyashgaonkar made their first contribution in #​1106
• @​priyagupta108 made their first contribution in #​1126
• @​Jcambass made their first contribution in #​1125
• @​fulldecent made their first contribution in #​1124

Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.0.4

v4.0.3

Compare Source

What's Changed

Bug fixes:

• Fix macos latest check failures by @​HarithaVattikuti in #​1041

Documentation changes:

• Documentation update to update default Node version to 20 by @​bengreeley in #​949

Dependency updates:

• Bump undici from 5.26.5 to 5.28.3 by @​dependabot in #​965
• Bump braces from 3.0.2 to 3.0.3 and other dependency updates by @​dependabot in #​1087

New Contributors

• @​bengreeley made their first contribution in #​949
• @​HarithaVattikuti made their first contribution in #​1041

Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.0.3

v4.0.2

Compare Source

What's Changed

• Add support for volta.extends by @​ThisIsManta in #​921
• Add support for arm64 Windows by @​dmitry-shibanov in #​927

New Contributors

• @​ThisIsManta made their first contribution in #​921

Full Changelog: https://github.com/actions/setup-node/compare/v4.0.1...v4.0.2

v4.0.1

Compare Source

What's Changed

• Ignore engines in Yarn 1 e2e-cache tests by @​trivikr in #​882
• Update setup-node references in the README.md file to setup-node@​v4 by @​jwetzell in #​884
• Update reusable workflows to use Node.js v20 by @​MaksimZhukov in #​889
• Add fix for cache to resolve slow post action step by @​aparnajyothi-y in #​917
• Fix README.md by @​takayamaki in #​898
• Add package.json to node-version-file list of examples. by @​TWiStErRob in #​879
• Fix node-version-file interprets entire package.json as a version by @​NullVoxPopuli in #​865

New Contributors

• @​trivikr made their first contribution in #​882
• @​jwetzell made their first contribution in #​884
• @​aparnajyothi-y made their first contribution in #​917
• @​takayamaki made their first contribution in #​898
• @​TWiStErRob made their first contribution in #​879
• @​NullVoxPopuli made their first contribution in #​865

Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.0.1

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

---

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/webgrip/infrastructure/pull/27 **Author:** [@webgrip-renovate[bot]](https://github.com/apps/webgrip-renovate) **Created:** 6/2/2026 **Status:** ❌ Closed **Base:** `main` ← **Head:** `renovate/actions-setup-node-6.x` --- ### 📝 Commits (1) - [`2d3545d`](https://github.com/webgrip/infrastructure/commit/2d3545d0e446df1877c1e5258afc957ab5b60260) chore(deps): update actions/setup-node action to v6 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/actions/semantic-release-monorepo/action.yml` (+1 -1) </details> ### 📄 Description This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v4` → `v6` | --- > [!WARNING] > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>actions/setup-node (actions/setup-node)</summary> ### [`v6.4.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.4.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.3.0...v6.4.0) #### What's Changed ##### Dependency updates: - Upgrade [@&#8203;actions](https://redirect.github.com/actions) dependencies by [@&#8203;Copilot](https://redirect.github.com/Copilot) in [#&#8203;1525](https://redirect.github.com/actions/setup-node/pull/1525) - Update Node.js versions in versions.yml and bump package to v6.4.0 by [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in [#&#8203;1533](https://redirect.github.com/actions/setup-node/pull/1533) #### New Contributors - [@&#8203;Copilot](https://redirect.github.com/Copilot) made their first contribution in [#&#8203;1525](https://redirect.github.com/actions/setup-node/pull/1525) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v6.4.0> ### [`v6.3.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.3.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.2.0...v6.3.0) #### What's Changed ##### Enhancements: - Support parsing `devEngines` field by [@&#8203;susnux](https://redirect.github.com/susnux) in [#&#8203;1283](https://redirect.github.com/actions/setup-node/pull/1283) > When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node. ##### Dependency updates: - Fix npm audit issues by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1491](https://redirect.github.com/actions/setup-node/pull/1491) - Replace uuid with crypto.randomUUID() by [@&#8203;trivikr](https://redirect.github.com/trivikr) in [#&#8203;1378](https://redirect.github.com/actions/setup-node/pull/1378) - Upgrade minimatch from 3.1.2 to 3.1.5 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1498](https://redirect.github.com/actions/setup-node/pull/1498) ##### Bug fixes: - Remove hardcoded bearer for mirror-url [@&#8203;marco-ippolito](https://redirect.github.com/marco-ippolito) in [#&#8203;1467](https://redirect.github.com/actions/setup-node/pull/1467) - Scope test lockfiles by package manager and update cache tests by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1495](https://redirect.github.com/actions/setup-node/pull/1495) #### New Contributors - [@&#8203;susnux](https://redirect.github.com/susnux) made their first contribution in [#&#8203;1283](https://redirect.github.com/actions/setup-node/pull/1283) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v6.3.0> ### [`v6.2.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.2.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.1.0...v6.2.0) #### What's Changed ##### Documentation - Documentation update related to absence of Lockfile by [@&#8203;mahabaleshwars](https://redirect.github.com/mahabaleshwars) in [#&#8203;1454](https://redirect.github.com/actions/setup-node/pull/1454) - Correct mirror option typos by [@&#8203;MikeMcC399](https://redirect.github.com/MikeMcC399) in [#&#8203;1442](https://redirect.github.com/actions/setup-node/pull/1442) - Readme update on checkout version v6 by [@&#8203;deining](https://redirect.github.com/deining) in [#&#8203;1446](https://redirect.github.com/actions/setup-node/pull/1446) - Readme typo fixes [@&#8203;munyari](https://redirect.github.com/munyari) in [#&#8203;1226](https://redirect.github.com/actions/setup-node/pull/1226) - Advanced document update on checkout version v6 by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [#&#8203;1468](https://redirect.github.com/actions/setup-node/pull/1468) ##### Dependency updates: - Upgrade [@&#8203;actions/cache](https://redirect.github.com/actions/cache) to v5.0.1 by [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) in [#&#8203;1449](https://redirect.github.com/actions/setup-node/pull/1449) #### New Contributors - [@&#8203;mahabaleshwars](https://redirect.github.com/mahabaleshwars) made their first contribution in [#&#8203;1454](https://redirect.github.com/actions/setup-node/pull/1454) - [@&#8203;MikeMcC399](https://redirect.github.com/MikeMcC399) made their first contribution in [#&#8203;1442](https://redirect.github.com/actions/setup-node/pull/1442) - [@&#8203;deining](https://redirect.github.com/deining) made their first contribution in [#&#8203;1446](https://redirect.github.com/actions/setup-node/pull/1446) - [@&#8203;munyari](https://redirect.github.com/munyari) made their first contribution in [#&#8203;1226](https://redirect.github.com/actions/setup-node/pull/1226) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v6.2.0> ### [`v6.1.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.1.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6...v6.1.0) #### What's Changed ##### Enhancement: - Remove always-auth configuration handling by [@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) in [#&#8203;1436](https://redirect.github.com/actions/setup-node/pull/1436) ##### Dependency updates: - Upgrade [@&#8203;actions/cache](https://redirect.github.com/actions/cache) from 4.0.3 to 4.1.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1384](https://redirect.github.com/actions/setup-node/pull/1384) - Upgrade actions/checkout from 5 to 6 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1439](https://redirect.github.com/actions/setup-node/pull/1439) - Upgrade js-yaml from 3.14.1 to 3.14.2 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1435](https://redirect.github.com/actions/setup-node/pull/1435) ##### Documentation update: - Add example for restore-only cache in documentation by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [#&#8203;1419](https://redirect.github.com/actions/setup-node/pull/1419) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v6.1.0> ### [`v6.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6...v6) #### What's Changed **Breaking Changes** - Limit automatic caching to npm, update workflows and documentation by [@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) in [#&#8203;1374](https://redirect.github.com/actions/setup-node/pull/1374) **Dependency Upgrades** - Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1336](https://redirect.github.com/actions/setup-node/pull/1336) - Upgrade prettier from 2.8.8 to 3.6.2 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1334](https://redirect.github.com/actions/setup-node/pull/1334) - Upgrade actions/publish-action from 0.3.0 to 0.4.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1362](https://redirect.github.com/actions/setup-node/pull/1362) **Full Changelog**: <https://github.com/actions/setup-node/compare/v5...v6.0.0> ### [`v6`](https://redirect.github.com/actions/setup-node/compare/v5.0.0...v6) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v5.0.0...v6) ### [`v5.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v5.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v5.0.0...v5.0.0) #### What's Changed ##### Breaking Changes - Enhance caching in setup-node with automatic package manager detection by [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in [#&#8203;1348](https://redirect.github.com/actions/setup-node/pull/1348) This update, introduces automatic caching when a valid `packageManager` field is present in your `package.json`. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set `package-manager-cache: false` ```yaml steps: - uses: actions/checkout@v5 - uses: actions/setup-node@v5 with: package-manager-cache: false ``` - Upgrade action to use node24 by [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) in [#&#8203;1325](https://redirect.github.com/actions/setup-node/pull/1325) Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. [See Release Notes](https://redirect.github.com/actions/runner/releases/tag/v2.327.1) ##### Dependency Upgrades - Upgrade [@&#8203;octokit/request-error](https://redirect.github.com/octokit/request-error) and [@&#8203;actions/github](https://redirect.github.com/actions/github) by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1227](https://redirect.github.com/actions/setup-node/pull/1227) - Upgrade uuid from 9.0.1 to 11.1.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1273](https://redirect.github.com/actions/setup-node/pull/1273) - Upgrade undici from 5.28.5 to 5.29.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1295](https://redirect.github.com/actions/setup-node/pull/1295) - Upgrade form-data to bring in fix for critical vulnerability by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1332](https://redirect.github.com/actions/setup-node/pull/1332) - Upgrade actions/checkout from 4 to 5 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1345](https://redirect.github.com/actions/setup-node/pull/1345) #### New Contributors - [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) made their first contribution in [#&#8203;1348](https://redirect.github.com/actions/setup-node/pull/1348) - [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) made their first contribution in [#&#8203;1325](https://redirect.github.com/actions/setup-node/pull/1325) **Full Changelog**: <https://github.com/actions/setup-node/compare/v4...v5.0.0> ### [`v5`](https://redirect.github.com/actions/setup-node/compare/v4.4.0...v5.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v4.4.0...v5.0.0) ### [`v4.4.0`](https://redirect.github.com/actions/setup-node/releases/tag/v4.4.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v4.3.0...v4.4.0) #### What's Changed ##### Bug fixes: - Make eslint-compact matcher compatible with Stylelint by [@&#8203;FloEdelmann](https://redirect.github.com/FloEdelmann) in [#&#8203;98](https://redirect.github.com/actions/setup-node/pull/98) - Add support for indented eslint output by [@&#8203;fregante](https://redirect.github.com/fregante) in [#&#8203;1245](https://redirect.github.com/actions/setup-node/pull/1245) ##### Enhancement: - Support private mirrors by [@&#8203;marco-ippolito](https://redirect.github.com/marco-ippolito) in [#&#8203;1240](https://redirect.github.com/actions/setup-node/pull/1240) ##### Dependency update: - Upgrade [@&#8203;action/cache](https://redirect.github.com/action/cache) from 4.0.2 to 4.0.3 by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [#&#8203;1262](https://redirect.github.com/actions/setup-node/pull/1262) #### New Contributors - [@&#8203;FloEdelmann](https://redirect.github.com/FloEdelmann) made their first contribution in [#&#8203;98](https://redirect.github.com/actions/setup-node/pull/98) - [@&#8203;fregante](https://redirect.github.com/fregante) made their first contribution in [#&#8203;1245](https://redirect.github.com/actions/setup-node/pull/1245) - [@&#8203;marco-ippolito](https://redirect.github.com/marco-ippolito) made their first contribution in [#&#8203;1240](https://redirect.github.com/actions/setup-node/pull/1240) **Full Changelog**: <https://github.com/actions/setup-node/compare/v4...v4.4.0> ### [`v4.3.0`](https://redirect.github.com/actions/setup-node/releases/tag/v4.3.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v4.2.0...v4.3.0) #### What's Changed ##### Dependency updates - Upgrade [@&#8203;actions/glob](https://redirect.github.com/actions/glob) from 0.4.0 to 0.5.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1200](https://redirect.github.com/actions/setup-node/pull/1200) - Upgrade [@&#8203;action/cache](https://redirect.github.com/action/cache) from 4.0.0 to 4.0.2 by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1251](https://redirect.github.com/actions/setup-node/pull/1251) - Upgrade [@&#8203;vercel/ncc](https://redirect.github.com/vercel/ncc) from 0.38.1 to 0.38.3 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1203](https://redirect.github.com/actions/setup-node/pull/1203) - Upgrade [@&#8203;actions/tool-cache](https://redirect.github.com/actions/tool-cache) from 2.0.1 to 2.0.2 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1220](https://redirect.github.com/actions/setup-node/pull/1220) #### New Contributors - [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) made their first contribution in [#&#8203;1251](https://redirect.github.com/actions/setup-node/pull/1251) **Full Changelog**: <https://github.com/actions/setup-node/compare/v4...v4.3.0> ### [`v4.2.0`](https://redirect.github.com/actions/setup-node/releases/tag/v4.2.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v4.1.0...v4.2.0) #### What's Changed - Enhance workflows and upgrade publish-actions from 0.2.2 to 0.3.0 by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [#&#8203;1174](https://redirect.github.com/actions/setup-node/pull/1174) - Add recommended permissions section to readme by [@&#8203;benwells](https://redirect.github.com/benwells) in [#&#8203;1193](https://redirect.github.com/actions/setup-node/pull/1193) - Configure Dependabot settings by [@&#8203;HarithaVattikuti](https://redirect.github.com/HarithaVattikuti) in [#&#8203;1192](https://redirect.github.com/actions/setup-node/pull/1192) - Upgrade `@actions/cache` to `^4.0.0` by [@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) in [#&#8203;1191](https://redirect.github.com/actions/setup-node/pull/1191) - Upgrade pnpm/action-setup from 2 to 4 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1194](https://redirect.github.com/actions/setup-node/pull/1194) - Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1195](https://redirect.github.com/actions/setup-node/pull/1195) - Upgrade semver from 7.6.0 to 7.6.3 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1196](https://redirect.github.com/actions/setup-node/pull/1196) - Upgrade [@&#8203;types/jest](https://redirect.github.com/types/jest) from 29.5.12 to 29.5.14 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1201](https://redirect.github.com/actions/setup-node/pull/1201) - Upgrade undici from 5.28.4 to 5.28.5 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1205](https://redirect.github.com/actions/setup-node/pull/1205) #### New Contributors - [@&#8203;benwells](https://redirect.github.com/benwells) made their first contribution in [#&#8203;1193](https://redirect.github.com/actions/setup-node/pull/1193) **Full Changelog**: <https://github.com/actions/setup-node/compare/v4...v4.2.0> ### [`v4.1.0`](https://redirect.github.com/actions/setup-node/releases/tag/v4.1.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v4.0.4...v4.1.0) #### What's Changed - Resolve High Security Alerts by upgrading Dependencies by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [#&#8203;1132](https://redirect.github.com/actions/setup-node/pull/1132) - Upgrade IA Publish by [@&#8203;Jcambass](https://redirect.github.com/Jcambass) in [#&#8203;1134](https://redirect.github.com/actions/setup-node/pull/1134) - Revise `isGhes` logic by [@&#8203;jww3](https://redirect.github.com/jww3) in [#&#8203;1148](https://redirect.github.com/actions/setup-node/pull/1148) - Add architecture to cache key by [@&#8203;pengx17](https://redirect.github.com/pengx17) in [#&#8203;843](https://redirect.github.com/actions/setup-node/pull/843) This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts. Note: This change may break previous cache keys as they will no longer be compatible with the new format. #### New Contributors - [@&#8203;jww3](https://redirect.github.com/jww3) made their first contribution in [#&#8203;1148](https://redirect.github.com/actions/setup-node/pull/1148) - [@&#8203;pengx17](https://redirect.github.com/pengx17) made their first contribution in [#&#8203;843](https://redirect.github.com/actions/setup-node/pull/843) **Full Changelog**: <https://github.com/actions/setup-node/compare/v4...v4.1.0> ### [`v4.0.4`](https://redirect.github.com/actions/setup-node/releases/tag/v4.0.4) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v4.0.3...v4.0.4) #### What's Changed - Add workflow file for publishing releases to immutable action package by [@&#8203;Jcambass](https://redirect.github.com/Jcambass) in [#&#8203;1125](https://redirect.github.com/actions/setup-node/pull/1125) - Enhance Windows ARM64 Setup and Update micromatch Dependency by [@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) in [#&#8203;1126](https://redirect.github.com/actions/setup-node/pull/1126) ##### Documentation changes: - Documentation update in the README file by [@&#8203;suyashgaonkar](https://redirect.github.com/suyashgaonkar) in [#&#8203;1106](https://redirect.github.com/actions/setup-node/pull/1106) - Correct invalid 'lts' version string reference by [@&#8203;fulldecent](https://redirect.github.com/fulldecent) in [#&#8203;1124](https://redirect.github.com/actions/setup-node/pull/1124) #### New Contributors - [@&#8203;suyashgaonkar](https://redirect.github.com/suyashgaonkar) made their first contribution in [#&#8203;1106](https://redirect.github.com/actions/setup-node/pull/1106) - [@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) made their first contribution in [#&#8203;1126](https://redirect.github.com/actions/setup-node/pull/1126) - [@&#8203;Jcambass](https://redirect.github.com/Jcambass) made their first contribution in [#&#8203;1125](https://redirect.github.com/actions/setup-node/pull/1125) - [@&#8203;fulldecent](https://redirect.github.com/fulldecent) made their first contribution in [#&#8203;1124](https://redirect.github.com/actions/setup-node/pull/1124) **Full Changelog**: <https://github.com/actions/setup-node/compare/v4...v4.0.4> ### [`v4.0.3`](https://redirect.github.com/actions/setup-node/releases/tag/v4.0.3) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v4.0.2...v4.0.3) #### What's Changed ##### Bug fixes: - Fix macos latest check failures by [@&#8203;HarithaVattikuti](https://redirect.github.com/HarithaVattikuti) in [#&#8203;1041](https://redirect.github.com/actions/setup-node/pull/1041) ##### Documentation changes: - Documentation update to update default Node version to 20 by [@&#8203;bengreeley](https://redirect.github.com/bengreeley) in [#&#8203;949](https://redirect.github.com/actions/setup-node/pull/949) ##### Dependency updates: - Bump undici from 5.26.5 to 5.28.3 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;965](https://redirect.github.com/actions/setup-node/pull/965) - Bump braces from 3.0.2 to 3.0.3 and other dependency updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1087](https://redirect.github.com/actions/setup-node/pull/1087) #### New Contributors - [@&#8203;bengreeley](https://redirect.github.com/bengreeley) made their first contribution in [#&#8203;949](https://redirect.github.com/actions/setup-node/pull/949) - [@&#8203;HarithaVattikuti](https://redirect.github.com/HarithaVattikuti) made their first contribution in [#&#8203;1041](https://redirect.github.com/actions/setup-node/pull/1041) **Full Changelog**: <https://github.com/actions/setup-node/compare/v4...v4.0.3> ### [`v4.0.2`](https://redirect.github.com/actions/setup-node/releases/tag/v4.0.2) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v4.0.1...v4.0.2) #### What's Changed - Add support for `volta.extends` by [@&#8203;ThisIsManta](https://redirect.github.com/ThisIsManta) in [#&#8203;921](https://redirect.github.com/actions/setup-node/pull/921) - Add support for arm64 Windows by [@&#8203;dmitry-shibanov](https://redirect.github.com/dmitry-shibanov) in [#&#8203;927](https://redirect.github.com/actions/setup-node/pull/927) #### New Contributors - [@&#8203;ThisIsManta](https://redirect.github.com/ThisIsManta) made their first contribution in [#&#8203;921](https://redirect.github.com/actions/setup-node/pull/921) **Full Changelog**: <https://github.com/actions/setup-node/compare/v4.0.1...v4.0.2> ### [`v4.0.1`](https://redirect.github.com/actions/setup-node/releases/tag/v4.0.1) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v4...v4.0.1) #### What's Changed - Ignore engines in Yarn 1 e2e-cache tests by [@&#8203;trivikr](https://redirect.github.com/trivikr) in [#&#8203;882](https://redirect.github.com/actions/setup-node/pull/882) - Update setup-node references in the README.md file to setup-node\@&#8203;v4 by [@&#8203;jwetzell](https://redirect.github.com/jwetzell) in [#&#8203;884](https://redirect.github.com/actions/setup-node/pull/884) - Update reusable workflows to use Node.js v20 by [@&#8203;MaksimZhukov](https://redirect.github.com/MaksimZhukov) in [#&#8203;889](https://redirect.github.com/actions/setup-node/pull/889) - Add fix for cache to resolve slow post action step by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [#&#8203;917](https://redirect.github.com/actions/setup-node/pull/917) - Fix README.md by [@&#8203;takayamaki](https://redirect.github.com/takayamaki) in [#&#8203;898](https://redirect.github.com/actions/setup-node/pull/898) - Add `package.json` to `node-version-file` list of examples. by [@&#8203;TWiStErRob](https://redirect.github.com/TWiStErRob) in [#&#8203;879](https://redirect.github.com/actions/setup-node/pull/879) - Fix node-version-file interprets entire package.json as a version by [@&#8203;NullVoxPopuli](https://redirect.github.com/NullVoxPopuli) in [#&#8203;865](https://redirect.github.com/actions/setup-node/pull/865) #### New Contributors - [@&#8203;trivikr](https://redirect.github.com/trivikr) made their first contribution in [#&#8203;882](https://redirect.github.com/actions/setup-node/pull/882) - [@&#8203;jwetzell](https://redirect.github.com/jwetzell) made their first contribution in [#&#8203;884](https://redirect.github.com/actions/setup-node/pull/884) - [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) made their first contribution in [#&#8203;917](https://redirect.github.com/actions/setup-node/pull/917) - [@&#8203;takayamaki](https://redirect.github.com/takayamaki) made their first contribution in [#&#8203;898](https://redirect.github.com/actions/setup-node/pull/898) - [@&#8203;TWiStErRob](https://redirect.github.com/TWiStErRob) made their first contribution in [#&#8203;879](https://redirect.github.com/actions/setup-node/pull/879) - [@&#8203;NullVoxPopuli](https://redirect.github.com/NullVoxPopuli) made their first contribution in [#&#8203;865](https://redirect.github.com/actions/setup-node/pull/865) **Full Changelog**: <https://github.com/actions/setup-node/compare/v4...v4.0.1> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTUuNSIsInVwZGF0ZWRJblZlciI6IjQzLjE5NS41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> --- _{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

ryangr0 2026-06-08 09:03:26 +00:00

• closed this issue
• added the
  pull-request
  label

ryangr0 referenced this issue 2026-06-08 09:03:29 +00:00

[PR #15] [MERGED] feat: enterprise supply chain security — cosign keyless signing, SBOM attestation, SLSA provenance, Trivy scanning, Kyverno enforcement, ACT smoke validation #26

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

main

feat/agent-runner-dhi-alpine

feat/techdocs-builder-dhi

feat/semrel-family-dhi-alpine

feat/semantic-release-monorepo-dhi-base

feat/semantic-release-dhi-base

feat/node-ci-runner-dhi-base

feat/helm-deploy-dhi-base

feat/act-runner-dhi-base

fix/promote-dash-candidate

perf/consolidate-release-plumbing

fix/helm-deploy-tool-bumps

fix/candidate-keyed-by-version

feat/promote-by-digest

feat/cve-budgets-measured

diag/measure-cve-budgets

fix/techdocs-builder-zensical-conflict

fix/semantic-release-rust-signed-reentry

fix/node-ci-runner-signed-reentry

docs/hardening-wave3-plan

fix/techdocs-runner-pin-parent

fix/mkdocs-runner-pin-parent

fix/tauri-ci-runner-pin-parent

fix/ci-runner-signed-cve-gate

fix/helm-deploy-verify-downloads

fix/techdocs-builder-annotate-stages

fix/rust-ci-runner-pin-build-stage

fix/rust-releaser-pin-toolchain

fix/semantic-release-rust-pin-base

fix/semantic-release-monorepo-pin-base

fix/semantic-release-pin-base

fix/playwright-runner-pin-base

fix/act-runner-pin-act

fix/node-ci-runner-pin-base

fix/bump-workflows-pin-codeberg-bash

fix/renovate-digest-aware-args

docs/upstream-vex-in-harbor

fix/harbor-sbom-honest-report

fix/vex-aliases-and-unmatched-guard

fix/gate-stderr-not-a-tty

perf/drop-installer-actions

fix/release-matrix-multiline-output

fix/cve-gate-header-accuracy

feat/release-manual-trigger

fix/ci-runner-claude-code-and-renovate-annotation

docs/adr-buildkitd-and-gate-as-step

perf/release-verify-uses-buildkitd

perf/cve-gate-as-a-step

perf/ci-runner-bake-gate

fix/cve-gate-volume-ownership

fix/ci-runner-verify-helm-yq

fix/cve-gate-scan-space

chore/oci-labels-batch1

perf/build-check-cli

chore/forgejo-git-throughput-probe

perf/ci-runner-bake-cosign-syft

fix/cve-gate-seccomp-clone

fix/cve-gate-pin-existing-version

fix/cve-gate-readonly-inputs

fix/cve-gate-moby-floor

feat/cve-gate-static

fix/cve-gate-vex-and-budget

fix/cve-gate-staging-root

ci/build-check-on-branches

fix/cve-gate-dhi-registry

feat/cve-gate

feat/harden-supply-chain

fix/semrel-toolchain-one-source

fix/semrel-fork-direct-binary

renovate/actions-attest-build-provenance-3.x

renovate/sigstore-cosign-installer-4.x

renovate/github-codeql-action-4.x

renovate/docker-login-action-4.x

renovate/actions-create-github-app-token-3.x

renovate/actions-attest-build-provenance-4.x

copilot/fix-docker-build-and-push

copilot/fix-1

agent-runner-v1.0.4

techdocs-runner-v1.1.0

mkdocs-runner-v1.1.0

techdocs-builder-v1.8.0

semantic-release-rust-v0.1.4

semantic-release-rust-v0.1.3

semantic-release-v0.3.0

semantic-release-monorepo-v0.3.0

techdocs-builder-v1.7.0

semantic-release-monorepo-v0.2.0

semantic-release-v0.2.0

node-ci-runner-v1.1.0

techdocs-builder-v1.6.0

helm-deploy-v1.3.0

act-runner-v1.3.0

techdocs-builder-v1.5.2

techdocs-builder-v1.5.1

techdocs-builder-v1.5.0

helm-deploy-v1.2.5

helm-deploy-v1.2.4

techdocs-builder-v1.4.0

ci-runner-v1.2.4

techdocs-runner-v1.0.3

mkdocs-runner-v1.0.3

techdocs-builder-v1.3.0

techdocs-builder-v1.2.22

rust-ci-runner-v1.4.1

tauri-ci-runner-v1.1.1

rust-releaser-v1.2.1

semantic-release-rust-v0.1.2

node-ci-runner-v1.0.2

semantic-release-monorepo-v0.1.1

semantic-release-v0.1.3

playwright-runner-v1.1.2

helm-deploy-v1.2.3

act-runner-v1.2.3

semantic-release-rust-v0.1.1

node-ci-runner-v1.0.1

cve-gate-v0.3.4

cve-gate-v0.3.3

ci-runner-v1.2.3

ci-runner-v1.2.2

ci-runner-v1.2.1

cve-gate-v0.3.2

cve-gate-v0.3.1

cve-gate-v0.3.0

cve-gate-v0.2.0

cve-gate-v0.1.0

semantic-release-rust-v0.1.0

semantic-release-monorepo-v0.1.0

semantic-release-v0.1.2

semantic-release-v0.1.1

semantic-release-v0.1.0

v2.2.0

tauri-ci-runner-v1.1.0

techdocs-runner-v1.0.2

mkdocs-runner-v1.0.2

agent-runner-v1.0.3

rust-releaser-v1.2.0

ci-runner-v1.2.0

techdocs-runner-v1.0.1

mkdocs-runner-v1.0.1

helm-deploy-v1.2.2

act-runner-v1.2.2

playwright-runner-v1.1.1

vikunja-mcp-v0.1.0

agent-runner-v1.0.2

rust-ci-runner-v1.4.0

ci-runner-v1.1.0

tauri-ci-runner-v1.0.1

tauri-ci-runner-v1.0.0

node-ci-runner-v1.0.0

v2.1.1

v2.1.0

php-ci-runner-v1.3.0

rust-ci-runner-v1.3.0

v2.0.0

agent-runner-v1.0.1

agent-runner-v1.0.0

ci-runner-v1.0.4

ci-runner-v1.0.3

ci-runner-v1.0.2

ci-runner-v1.0.1

ci-runner-v1.0.0

openhands-runner-v1.0.0

skills-ci-runner-v1.0.0

rust-releaser-v1.1.1

github-runner-v1.4.0

techdocs-builder-v1.2.21

techdocs-builder-v1.2.20

techdocs-builder-v1.2.19

techdocs-builder-v1.2.17

techdocs-builder-v1.2.16

techdocs-builder-v1.2.15

techdocs-builder-v1.2.14

techdocs-builder-v1.2.13

techdocs-builder-v1.2.12

techdocs-builder-v1.2.11

techdocs-builder-v1.2.10

techdocs-builder-v1.2.9

techdocs-builder-v1.2.8

github-runner-v1.3.2

techdocs-builder-v1.2.7

act-runner-v1.2.1

helm-deploy-v1.2.1

php-ci-runner-v1.2.1

github-runner-v1.3.1

techdocs-builder-v1.2.6

techdocs-builder-v1.2.5

techdocs-builder-v1.2.4

techdocs-builder-v1.2.3

php-ci-runner-v1.2.0

playwright-runner-v1.1.0

helm-deploy-v1.2.0

rust-releaser-v1.1.0

act-runner-v1.2.0

github-runner-v1.3.0

techdocs-builder-v1.2.2

techdocs-builder-v1.2.1

techdocs-builder-v1.2.0

github-runner-v1.2.2

github-runner-v1.2.1

rust-ci-runner-v1.2.0

github-runner-v1.2.0

php-ci-runner-v1.1.1

techdocs-runner-v1.0.0

mkdocs-runner-v1.0.0

php-ci-runner-v1.1.0

techdocs-builder-v1.1.0

php-ci-runner-v1.0.0

techdocs-builder-v1.0.3

techdocs-builder-v1.0.2

techdocs-builder-v1.0.1

techdocs-builder-v1.0.0

act-runner-v1.1.0

helm-deploy-v1.1.0

rust-ci-runner-v1.1.0

github-runner-v1.1.0

github-runner-v1.0.0

rust-releaser-v1.0.0

helm-deploy-v1.0.0

act-runner-v1.0.0

playwright-runner-v1.0.0

rust-ci-runner-v1.0.0

v1.0.0

cve-gate-v0.0.0

toolchain-v0.0.0

semantic-release-v0.0.0

semantic-release-rust-v0.0.0

semantic-release-monorepo-v0.0.0

vikunja-mcp-v0.0.0

techdocs-builder-v1.2.18

Labels

Clear labels   

pull-request

Mirrored from GitHub Pull Request

  

released

No labels

pull-request

released

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

webgrip/infrastructure#15

No description provided.