Update actions/setup-node action to v6 by renovate[bot] · Pull Request #23 · OpenZeppelin/secure-development-cookbook

renovate · 2025-10-14T05:02:45Z

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	major	`v4` → `v6`

Release Notes

actions/setup-node (actions/setup-node)

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-10-14T05:04:05Z

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
❌ ACTION	actionlint	3		1	0.01s
✅ JAVASCRIPT	prettier	1	1	0	0.42s
✅ JSON	jsonlint	8		0	0.12s
✅ JSON	npm-package-json-lint	yes		no	0.31s
✅ JSON	prettier	8	2	0	0.54s
✅ JSON	v8r	8		0	21.85s
⚠️ MARKDOWN	markdownlint	9	0	20	0.85s
⚠️ MARKDOWN	markdown-link-check	9		3	3.27s
✅ MARKDOWN	markdown-table-formatter	9	0	0	0.27s
✅ REPOSITORY	checkov	yes		no	12.09s
✅ REPOSITORY	gitleaks	yes		no	0.05s
✅ REPOSITORY	git_diff	yes		no	0.0s
❌ REPOSITORY	grype	yes		1	16.72s
✅ REPOSITORY	secretlint	yes		no	0.73s
✅ REPOSITORY	trivy-sbom	yes		no	0.73s
✅ REPOSITORY	trufflehog	yes		no	3.52s
⚠️ SPELL	cspell	27		118	5.53s
❌ SPELL	lychee	24		11	0.85s
⚠️ SPELL	proselint	9		5	9.52s
✅ YAML	prettier	7	3	0	0.61s
✅ YAML	yamllint	7		0	0.99s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by

chore(deps): update actions/setup-node action to v6

de870cc

github-actions bot added the prod label Oct 14, 2025

renovate bot changed the title ~~chore(deps): update actions/setup-node action to v6~~ Update actions/setup-node action to v6 Apr 8, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update actions/setup-node action to v6#23

Update actions/setup-node action to v6#23
renovate[bot] wants to merge 1 commit intomainfrom
renovate/actions-setup-node-6.x

renovate bot commented Oct 14, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Oct 14, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Oct 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v6.3.0

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

v6.2.0

v6.1.0

What's Changed

Enhancement:

Dependency updates:

Documentation update:

v6.0.0

What's Changed

v5.0.0

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

Configuration

Uh oh!

github-actions bot commented Oct 14, 2025

🦙 MegaLinter status: ❌ ERROR

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Oct 14, 2025 •

edited

Loading

`v6.3.0`

`v6.2.0`

`v6.1.0`

`v6.0.0`

`v5.0.0`