Skip to content

ci: bump actions/setup-node from 4 to 6#2

Merged
senutpal merged 1 commit intomainfrom
dependabot/github_actions/actions/setup-node-6
Jan 1, 2026
Merged

ci: bump actions/setup-node from 4 to 6#2
senutpal merged 1 commit intomainfrom
dependabot/github_actions/actions/setup-node-6

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps actions/setup-node from 4 to 6.

Release notes

Sourced from actions/setup-node's releases.

v6.0.0

What's Changed

Breaking Changes

Dependency Upgrades

Full Changelog: actions/setup-node@v5...v6.0.0

v5.0.0

What's Changed

Breaking Changes

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

New Contributors

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 1, 2026

Labels

The following labels could not be found: automated, ci. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@coderabbitai
Copy link

coderabbitai bot commented Jan 1, 2026

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@greptile-apps
Copy link

greptile-apps bot commented Jan 1, 2026

Greptile Summary

Upgraded actions/setup-node from v4 to v6 across CI and release workflows. The workflows are already properly configured with explicit cache: 'pnpm' settings, which is important since v6 introduced a breaking change that limits automatic caching to npm only. The existing configuration ensures pnpm dependency caching continues to work correctly.

Confidence Score: 5/5

  • This PR is safe to merge with no risk
  • Straightforward dependency version bump with proper compatibility - workflows already have explicit cache: 'pnpm' configuration that handles v6's breaking change (npm-only automatic caching), no logic changes, and the upgrade brings security fixes and dependency updates
  • No files require special attention

Important Files Changed

Filename Overview
.github/workflows/ci.yml Upgraded actions/setup-node from v4 to v6 in both build and security jobs; explicit cache: 'pnpm' ensures caching continues working with v6's npm-only automatic caching
.github/workflows/release.yml Upgraded actions/setup-node from v4 to v6; explicit cache: 'pnpm' setting correctly configured for v6

Sequence Diagram

sequenceDiagram
    participant GH as GitHub Actions
    participant Checkout as actions/checkout@v4
    participant PNPM as pnpm/action-setup@v4
    participant Node as actions/setup-node@v6
    participant Cache as Actions Cache
    participant Build as Build/Test Steps

    Note over GH,Build: CI Workflow (on push/PR)
    GH->>Checkout: Checkout repository
    Checkout-->>GH: Code ready
    GH->>PNPM: Setup pnpm 10.27.0
    PNPM-->>GH: pnpm installed
    GH->>Node: Setup Node.js 22 with cache: 'pnpm'
    Node->>Cache: Check for cached pnpm dependencies
    alt Cache exists
        Cache-->>Node: Restore cached dependencies
    else No cache
        Cache-->>Node: No cache found
    end
    Node-->>GH: Node.js ready
    GH->>Build: Install dependencies (pnpm install)
    Build->>Cache: Save pnpm dependencies to cache
    GH->>Build: Run lint, type-check, build, test
    Build-->>GH: Results

    Note over GH,Build: Release Workflow (on tag/manual)
    GH->>Checkout: Checkout repository
    Checkout-->>GH: Code ready
    GH->>PNPM: Setup pnpm 10.27.0
    PNPM-->>GH: pnpm installed
    GH->>Node: Setup Node.js 22 with cache: 'pnpm'
    Node->>Cache: Check for cached pnpm dependencies
    Cache-->>Node: Restore if available
    Node-->>GH: Node.js ready
    GH->>Build: Install, build, test, create release
    Build-->>GH: Release published
Loading

@senutpal senutpal merged commit 942a2d0 into main Jan 1, 2026
5 checks passed
@senutpal senutpal deleted the dependabot/github_actions/actions/setup-node-6 branch January 1, 2026 14:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant