Conversation
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v6) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Comment |
|
| Filename | Overview |
|---|---|
| .github/workflows/ci.yml | Upgraded actions/setup-node from v4 to v6 in both build and security jobs; explicit cache: 'pnpm' ensures caching continues working with v6's npm-only automatic caching |
| .github/workflows/release.yml | Upgraded actions/setup-node from v4 to v6; explicit cache: 'pnpm' setting correctly configured for v6 |
Sequence Diagram
sequenceDiagram
participant GH as GitHub Actions
participant Checkout as actions/checkout@v4
participant PNPM as pnpm/action-setup@v4
participant Node as actions/setup-node@v6
participant Cache as Actions Cache
participant Build as Build/Test Steps
Note over GH,Build: CI Workflow (on push/PR)
GH->>Checkout: Checkout repository
Checkout-->>GH: Code ready
GH->>PNPM: Setup pnpm 10.27.0
PNPM-->>GH: pnpm installed
GH->>Node: Setup Node.js 22 with cache: 'pnpm'
Node->>Cache: Check for cached pnpm dependencies
alt Cache exists
Cache-->>Node: Restore cached dependencies
else No cache
Cache-->>Node: No cache found
end
Node-->>GH: Node.js ready
GH->>Build: Install dependencies (pnpm install)
Build->>Cache: Save pnpm dependencies to cache
GH->>Build: Run lint, type-check, build, test
Build-->>GH: Results
Note over GH,Build: Release Workflow (on tag/manual)
GH->>Checkout: Checkout repository
Checkout-->>GH: Code ready
GH->>PNPM: Setup pnpm 10.27.0
PNPM-->>GH: pnpm installed
GH->>Node: Setup Node.js 22 with cache: 'pnpm'
Node->>Cache: Check for cached pnpm dependencies
Cache-->>Node: Restore if available
Node-->>GH: Node.js ready
GH->>Build: Install, build, test, create release
Build-->>GH: Release published
Bumps actions/setup-node from 4 to 6.
Release notes
Sourced from actions/setup-node's releases.
... (truncated)
Commits
395ad32Bump js-yaml from 3.14.1 to 3.14.2 (#1435)a4d2e2bBump actions/checkout from 5 to 6 (#1439)b9b25d4Remove always-auth configuration handling from action (#1436)633bb92Bump@actions/cachefrom 4.0.3 to 4.1.0 (#1384)dda4788Add example for restore-only cache in documentation (#1419)2028fbcLimit automatic caching to npm, update workflows and documentation (#1374)1342781Bump actions/publish-action from 0.3.0 to 0.4.0 (#1362)89d709dBump prettier from 2.8.8 to 3.6.2 (#1334)cd2651cBump ts-jest from 29.1.2 to 29.4.1 (#1336)a0853c2Bump actions/checkout from 4 to 5 (#1345)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)