Skip to content

chore(deps): update actions/setup-node action to v7 #787

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
renovate-bot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update actions/setup-node action to v7 #787

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/conformance.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@
node-version: [18, 20, 22]
steps:
- name: Harden Runner
uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0

Check failure on line 19 in .github/workflows/conformance.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/known-vulnerable-actions 

action has a known vulnerability: GHSA-g699-3x6g-wm3g

Check failure on line 19 in .github/workflows/conformance.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/known-vulnerable-actions 

action has a known vulnerability: GHSA-46g3-37rh-v698

Check failure on line 19 in .github/workflows/conformance.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

conformance.yml:19: action has a known vulnerability: GHSA-g699-3x6g-wm3g

Check failure on line 19 in .github/workflows/conformance.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

conformance.yml:19: action has a known vulnerability: GHSA-46g3-37rh-v698
with:
disable-sudo: true
egress-policy: block
Expand All @@ -34,7 +34,7 @@
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Use Node.js ${{ matrix.node-version }}
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: ${{ matrix.node-version }}

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/docs.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0

Check failure on line 15 in .github/workflows/docs.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/known-vulnerable-actions 

action has a known vulnerability: GHSA-g699-3x6g-wm3g

Check failure on line 15 in .github/workflows/docs.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/known-vulnerable-actions 

action has a known vulnerability: GHSA-46g3-37rh-v698

Check failure on line 15 in .github/workflows/docs.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

docs.yml:15: action has a known vulnerability: GHSA-g699-3x6g-wm3g

Check failure on line 15 in .github/workflows/docs.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

docs.yml:15: action has a known vulnerability: GHSA-46g3-37rh-v698
with:
disable-sudo: true
egress-policy: block
Expand All @@ -23,7 +23,7 @@

- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Setup Node.js
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: '24'
- name: Install dependencies
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/lint.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,13 +12,13 @@
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0

Check failure on line 15 in .github/workflows/lint.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/known-vulnerable-actions 

action has a known vulnerability: GHSA-g699-3x6g-wm3g

Check failure on line 15 in .github/workflows/lint.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/known-vulnerable-actions 

action has a known vulnerability: GHSA-46g3-37rh-v698

Check failure on line 15 in .github/workflows/lint.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

lint.yml:15: action has a known vulnerability: GHSA-g699-3x6g-wm3g

Check failure on line 15 in .github/workflows/lint.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

lint.yml:15: action has a known vulnerability: GHSA-46g3-37rh-v698
with:
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs

- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Setup Node.js
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
- name: Install dependencies
run: npm install
- name: Build TypeScript project
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0

Check failure on line 14 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/known-vulnerable-actions 

action has a known vulnerability: GHSA-g699-3x6g-wm3g

Check failure on line 14 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/known-vulnerable-actions 

action has a known vulnerability: GHSA-46g3-37rh-v698

Check failure on line 14 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

publish.yml:14: action has a known vulnerability: GHSA-g699-3x6g-wm3g

Check failure on line 14 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

publish.yml:14: action has a known vulnerability: GHSA-46g3-37rh-v698
with:
disable-sudo: true
egress-policy: block
Expand All @@ -23,16 +23,16 @@
wombat-dressing-room.appspot.com:443

- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: '24.x'
- run: npm install
- run: npm run build
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: '24.x'
registry-url: 'https://wombat-dressing-room.appspot.com'
- id: publish
env:
NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
run: npm publish

Check notice on line 38 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

use-trusted-publishing 

publish.yml:38: prefer trusted publishing for authentication: this command
2 changes: 1 addition & 1 deletion .github/workflows/unit.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@
runs-on: ${{ matrix.platform }}
steps:
- name: Harden Runner
uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0

Check failure on line 19 in .github/workflows/unit.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/known-vulnerable-actions 

action has a known vulnerability: GHSA-46g3-37rh-v698

Check failure on line 19 in .github/workflows/unit.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

unit.yml:19: action has a known vulnerability: GHSA-g699-3x6g-wm3g

Check failure on line 19 in .github/workflows/unit.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

unit.yml:19: action has a known vulnerability: GHSA-46g3-37rh-v698
with:
disable-sudo: true
egress-policy: block
Expand All @@ -30,7 +30,7 @@
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Use Node.js ${{ matrix.node-version }}
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: ${{ matrix.node-version }}
architecture: 'x64'
Expand Down
Loading