From 5233ce0e062c62b4f0b42e875d25db1d86abb49e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 16 Oct 2026 21:15:14 +0000 Subject: [PATCH] chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 7.0.0 to 7.1.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v7...v7.1.0) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 18 +++++++++--------- .github/workflows/codewhale-review.yml | 2 +- .github/workflows/marketplace-sync.yml | 2 +- .github/workflows/pet.yml | 4 ++-- .github/workflows/release-artifacts.yml | 4 ++-- .github/workflows/release-candidate.yml | 4 ++-- .github/workflows/release.yml | 6 +++--- .github/workflows/security-audit.yml | 2 +- .github/workflows/telemetry-ingest.yml | 2 +- .github/workflows/web.yml | 4 ++-- 10 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 79aa4a7871..ea840472a5 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -214,7 +214,7 @@ jobs: with: fetch-depth: 0 - uses: dtolnay/rust-toolchain@stable - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: 22 - name: Check version drift @@ -285,7 +285,7 @@ jobs: - uses: actions/setup-python@v7 with: python-version: '3.12' - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: 22 - name: Install data parser @@ -303,7 +303,7 @@ jobs: - uses: actions/checkout@v7 - name: Check Lighthouse SSH policy run: python3 scripts/tencent-lighthouse/test_bootstrap_ssh.py - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: 22 - name: Test reusable GitHub review action @@ -381,7 +381,7 @@ jobs: shell: bash steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: 22 - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2 @@ -414,7 +414,7 @@ jobs: working-directory: extensions/vscode steps: - uses: actions/checkout@v7 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: # The extension targets VS Code >=1.90, whose extension host is # Node 20, and its @types/node pin is ^20. Build and test on the @@ -431,7 +431,7 @@ jobs: run: npm test # @vscode/vsce 4 is a build-only packager that requires Node >=22. The # extension itself still compiles and tests on Node 20 above. - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: 22 - name: Package VS Code extension @@ -474,7 +474,7 @@ jobs: cache-bin: false save-if: ${{ github.ref == 'refs/heads/main' }} - uses: taiki-e/install-action@nextest - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: 24 - name: Hermetic safety and authorization tests @@ -912,7 +912,7 @@ jobs: run: | python3 -B scripts/test_check_command_config_proof.py sh scripts/check-portable-config.sh - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 # The extension-host integration tests spawn the real bundle under # Node >= 22.19; CODEWHALE_EXT_HOST_TESTS below makes a missing Node a # failure instead of a silent skip. @@ -1315,7 +1315,7 @@ jobs: echo "SCCACHE_GHA_ENABLED=true" >> "${GITHUB_ENV}" echo "RUSTC_WRAPPER=sccache" >> "${GITHUB_ENV}" echo "SCCACHE_IGNORE_SERVER_IO_ERROR=1" >> "${GITHUB_ENV}" - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 if: needs.changes.outputs.heavy == 'true' && (matrix.os != 'ubuntu-latest' || github.event_name == 'workflow_dispatch' || github.event_name == 'pull_request') with: node-version: 22 diff --git a/.github/workflows/codewhale-review.yml b/.github/workflows/codewhale-review.yml index 0d35886be1..906a6804d7 100644 --- a/.github/workflows/codewhale-review.yml +++ b/.github/workflows/codewhale-review.yml @@ -34,7 +34,7 @@ jobs: with: ref: ${{ github.event.pull_request.base.sha || github.sha }} persist-credentials: false - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: '22' - name: Mint Codewhale Agent token diff --git a/.github/workflows/marketplace-sync.yml b/.github/workflows/marketplace-sync.yml index 08218d9b2e..85e2e68a6f 100644 --- a/.github/workflows/marketplace-sync.yml +++ b/.github/workflows/marketplace-sync.yml @@ -50,7 +50,7 @@ jobs: ref: ${{ steps.source.outputs.revision }} path: marketplace persist-credentials: false - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '22' package-manager-cache: false diff --git a/.github/workflows/pet.yml b/.github/workflows/pet.yml index a48cbe4933..0b50dc7aab 100644 --- a/.github/workflows/pet.yml +++ b/.github/workflows/pet.yml @@ -24,7 +24,7 @@ jobs: timeout-minutes: 15 steps: - uses: actions/checkout@v7 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: '22' cache: npm @@ -61,7 +61,7 @@ jobs: timeout-minutes: 45 steps: - uses: actions/checkout@v7 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: '22' cache: npm diff --git a/.github/workflows/release-artifacts.yml b/.github/workflows/release-artifacts.yml index b843274b07..0920d6cb69 100644 --- a/.github/workflows/release-artifacts.yml +++ b/.github/workflows/release-artifacts.yml @@ -516,7 +516,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 22 package-manager-cache: false @@ -542,7 +542,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 22 package-manager-cache: false diff --git a/.github/workflows/release-candidate.yml b/.github/workflows/release-candidate.yml index 7c75d2ca60..32d8e55ba0 100644 --- a/.github/workflows/release-candidate.yml +++ b/.github/workflows/release-candidate.yml @@ -29,7 +29,7 @@ jobs: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 0 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 22 package-manager-cache: false @@ -100,7 +100,7 @@ jobs: # date to the tip commit and the committed facts always read as # stale; web.yml and ci.yml pin depth 0 for the same reason. fetch-depth: 0 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 22 cache: npm diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4161bbc6b7..652259dc3f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -394,7 +394,7 @@ jobs: with: ref: ${{ needs.resolve.outputs.sha }} path: repo - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 22 package-manager-cache: false @@ -469,7 +469,7 @@ jobs: with: ref: ${{ needs.resolve.outputs.sha }} fetch-depth: 0 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 24 registry-url: https://registry.npmjs.org @@ -574,7 +574,7 @@ jobs: # derive-facts.mjs dates model ids from git history (web.yml pins 0 # for the same reason); a shallow clone rewrites every addedAt. fetch-depth: 0 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 22 package-manager-cache: false diff --git a/.github/workflows/security-audit.yml b/.github/workflows/security-audit.yml index 57cef7de70..d021819ed0 100644 --- a/.github/workflows/security-audit.yml +++ b/.github/workflows/security-audit.yml @@ -64,7 +64,7 @@ jobs: working-directory: ${{ matrix.directory }} steps: - uses: actions/checkout@v7 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: '22' # Audit the complete committed lock, including build dependencies, and diff --git a/.github/workflows/telemetry-ingest.yml b/.github/workflows/telemetry-ingest.yml index 502782e786..c330bdf6f8 100644 --- a/.github/workflows/telemetry-ingest.yml +++ b/.github/workflows/telemetry-ingest.yml @@ -40,7 +40,7 @@ jobs: working-directory: telemetry-ingest steps: - uses: actions/checkout@v7 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: 22 cache: 'npm' diff --git a/.github/workflows/web.yml b/.github/workflows/web.yml index 3ff6543b08..b440520a2b 100644 --- a/.github/workflows/web.yml +++ b/.github/workflows/web.yml @@ -74,7 +74,7 @@ jobs: # history, so every date collapses to the tip commit and the committed # facts always read as stale. ci.yml pins depth 0 for the same reason. fetch-depth: 0 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 22 cache: 'npm' @@ -146,7 +146,7 @@ jobs: # while the run is queued behind the concurrency group. with: ref: ${{ github.sha }} - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 22 cache: 'npm'