Skip to content

chore(ci): bump actions/setup-node from 5.0.0 to 6.4.0 - #65

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-6.4.0
Closed

chore(ci): bump actions/setup-node from 5.0.0 to 6.4.0#65
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-6.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 30, 2026 •
edited by coderabbitai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps actions/setup-node from 5.0.0 to 6.4.0.

Release notes

Sourced from actions/setup-node's releases.

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Bug fixes:

New Contributors

Full Changelog: actions/setup-node@v6...v6.3.0

v6.2.0

What's Changed

Documentation

Dependency updates:

New Contributors

... (truncated)

Commits

Summary by CodeRabbit

  • Chores
    • Updated the Node.js setup action used in CI, release, and test coverage workflows to a newer pinned version.
    • Kept job steps, triggers, caching, and build/test/publish commands unchanged.

@dependabot @github

dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
chore(ci): bump actions/setup-node from 5.0.0 to 6.4.0
f80640c 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5.0.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@a0853c2...48b55a0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-6.4.0 branch from 8d9da0e to f80640c Compare July 2, 2026 20:47
@zeshi-du

zeshi-du commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Closing per our dependency policy: GitHub Actions versions in this repo are managed in the internal source-of-truth mirror (the public release workflow is regenerated by our snapshot tooling, so bumps merged here would be reverted on the next sync). We'll apply the equivalent bumps internally — thanks, dependabot 🤖

@zeshi-du zeshi-du closed this Jul 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 2, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/setup-node-6.4.0 branch July 2, 2026 20:47
@coderabbitai

coderabbitai Bot commented Jul 2, 2026 •
edited
Loading

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: e8daf0f4-1636-4ead-bbeb-f37829850a8b

📥 Commits

Reviewing files that changed from the base of the PR and between 7b7d80d and f80640c.

📒 Files selected for processing (3)
  • .github/workflows/ci.yml
  • .github/workflows/release.yaml
  • .github/workflows/test-coverage.yml

Walkthrough

This pull request updates the actions/setup-node GitHub Action version from v5.0.0 to v6.4.0 (pinned by commit SHA) across three workflow files: ci.yml (lint, typecheck, test, build, e2e jobs), release.yaml (publish job), and test-coverage.yml. No other logic changes.

Changes

Workflow Node Setup Version Bump

Layer / File(s) Summary
CI job Node setup updates
.github/workflows/ci.yml		 All five jobs (lint, typecheck, test, build, e2e) update the actions/setup-node step from v5.0.0 to v6.4.0 pinned SHA, keeping Node version and npm cache configuration unchanged.
Release and coverage Node setup updates
.github/workflows/release.yaml, .github/workflows/test-coverage.yml		 The publish job and test-coverage job update the actions/setup-node step to the v6.4.0 pinned SHA, preserving existing Node version and cache settings.

Estimated code review effort: 1 (Trivial) | ~3 minutes

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/github_actions/actions/setup-node-6.4.0

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown

Test Coverage Report

Metric Coverage
Lines 87.93%
Statements 87.93%
Functions 81.17%
Branches 86.07%

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@zeshi-du zeshi-du Awaiting requested review from zeshi-du zeshi-du is a code owner
@ruili-testsprite ruili-testsprite Awaiting requested review from ruili-testsprite ruili-testsprite is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@zeshi-du