Repository navigation
chore(deps): bump actions/setup-node from 6.4.0 to 7.1.0 - #10863
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 1e9afb3. Configure here.
|
|
||
| - name: Setup Node.js | ||
| uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 | ||
| uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 |
There was a problem hiding this comment.
Yarn install breaks without auth token
High Severity
actions/setup-node v7 no longer exports a placeholder NODE_AUTH_TOKEN when registry-url is set. This release job still uses Yarn Classic (yarn@1.22.19) and sets registry-url without NODE_AUTH_TOKEN, so yarn fails while substituting ${NODE_AUTH_TOKEN} in the generated .npmrc and the publish never runs.
Reviewed by Cursor Bugbot for commit 1e9afb3. Configure here.
|
coverage: 83.697% (-0.006%) from 83.703% — dependabot/github_actions/actions/setup-node-7.1.0 into master |
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.1.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@48b55a0...949feb2) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
1e9afb3 to
72b09b9
Compare
This branch has not been deployed
1 participant
Bumps actions/setup-node from 6.4.0 to 7.1.0.
Release notes
Sourced from actions/setup-node's releases.
... (truncated)
Commits
949feb2Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)7207c4fchore: update dependencies and add license files (#1642)54337e0Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)fb54fa8Bump jest-each from 30.4.1 to 30.5.2 (#1636)7f84f1dBump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)0c54c7bBump@typescript-eslint/parserfrom 8.62.0 to 8.70.0 (#1615)a829419Bump@types/semverfrom 7.7.1 to 7.8.0 (#1616)680d1e4Support absolute paths in node-version-file (#1633)db0fb3aBump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)94196eeBump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)Note
Low Risk
CI-only action pin updates with no workflow input or application code changes; validate release/npm publish jobs once after the major-version bump.
Overview
Bumps the pinned
actions/setup-nodeaction from v6.4.0 to v7.1.0 (commit949feb24…) everywhere Node is installed in CI.release.yml,test.yml(coverage, WebGPU, website, and Python jobs), andwebsite.ymleach update only theuses:line;with:options such asnode-version-file: '.nvmrc', Yarn cache, and releaseregistry-url/package-manager-cacheare unchanged.Reviewed by Cursor Bugbot for commit 72b09b9. Bugbot is set up for automated code reviews on this repo. Configure here.