chore(deps): update actions/setup-node action to v6 (#1326)

renovate[bot] · web-flow · commit 247ae7c26c0e · 2026-04-27T18:16:47.000-05:00
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v4.1.0` → `v6.4.0` | --- ### Release Notes <details> <summary>actions/setup-node (actions/setup-node)</summary> ### [`v6.4.0`](https://redirect.github.com/actions/setup-node/compare/v6.3.0...v6.4.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.3.0...v6.4.0) ### [`v6.3.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.3.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.2.0...v6.3.0) #### What's Changed ##### Enhancements: - Support parsing `devEngines` field by [@&#8203;susnux](https://redirect.github.com/susnux) in [#&#8203;1283](https://redirect.github.com/actions/setup-node/pull/1283) > When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node. ##### Dependency updates: - Fix npm audit issues by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1491](https://redirect.github.com/actions/setup-node/pull/1491) - Replace uuid with crypto.randomUUID() by [@&#8203;trivikr](https://redirect.github.com/trivikr) in [#&#8203;1378](https://redirect.github.com/actions/setup-node/pull/1378) - Upgrade minimatch from 3.1.2 to 3.1.5 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1498](https://redirect.github.com/actions/setup-node/pull/1498) ##### Bug fixes: - Remove hardcoded bearer for mirror-url [@&#8203;marco-ippolito](https://redirect.github.com/marco-ippolito) in [#&#8203;1467](https://redirect.github.com/actions/setup-node/pull/1467) - Scope test lockfiles by package manager and update cache tests by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1495](https://redirect.github.com/actions/setup-node/pull/1495) #### New Contributors - [@&#8203;susnux](https://redirect.github.com/susnux) made their first contribution in [#&#8203;1283](https://redirect.github.com/actions/setup-node/pull/1283) **Full Changelog**: <actions/setup-node@v6...v6.3.0> ### [`v6.2.0`](https://redirect.github.com/actions/setup-node/compare/v6.1.0...v6.2.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.1.0...v6.2.0) ### [`v6.1.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.1.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6...v6.1.0) #### What's Changed ##### Enhancement: - Remove always-auth configuration handling by [@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) in [#&#8203;1436](https://redirect.github.com/actions/setup-node/pull/1436) ##### Dependency updates: - Upgrade [@&#8203;actions/cache](https://redirect.github.com/actions/cache) from 4.0.3 to 4.1.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1384](https://redirect.github.com/actions/setup-node/pull/1384) - Upgrade actions/checkout from 5 to 6 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1439](https://redirect.github.com/actions/setup-node/pull/1439) - Upgrade js-yaml from 3.14.1 to 3.14.2 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1435](https://redirect.github.com/actions/setup-node/pull/1435) ##### Documentation update: - Add example for restore-only cache in documentation by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [#&#8203;1419](https://redirect.github.com/actions/setup-node/pull/1419) **Full Changelog**: <actions/setup-node@v6...v6.1.0> ### [`v6.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6...v6) ##### What's Changed **Breaking Changes** - Limit automatic caching to npm, update workflows and documentation by [@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) in [#&#8203;1374](https://redirect.github.com/actions/setup-node/pull/1374) **Dependency Upgrades** - Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1336](https://redirect.github.com/actions/setup-node/pull/1336) - Upgrade prettier from 2.8.8 to 3.6.2 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1334](https://redirect.github.com/actions/setup-node/pull/1334) - Upgrade actions/publish-action from 0.3.0 to 0.4.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1362](https://redirect.github.com/actions/setup-node/pull/1362) **Full Changelog**: <actions/setup-node@v5...v6.0.0> ### [`v6`](https://redirect.github.com/actions/setup-node/compare/v5...v6) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v5.0.0...v6) ### [`v5`](https://redirect.github.com/actions/setup-node/compare/v4...v5) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v5.0.0...v5.0.0) ### [`v5.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v5.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v4.4.0...v5.0.0) ##### What's Changed ##### Breaking Changes - Enhance caching in setup-node with automatic package manager detection by [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in [#&#8203;1348](https://redirect.github.com/actions/setup-node/pull/1348) This update, introduces automatic caching when a valid `packageManager` field is present in your `package.json`. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set `package-manager-cache: false` ```yaml steps: - uses: actions/checkout@v5 - uses: actions/setup-node@v5 with: package-manager-cache: false ``` - Upgrade action to use node24 by [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) in [#&#8203;1325](https://redirect.github.com/actions/setup-node/pull/1325) Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. [See Release Notes](https://redirect.github.com/actions/runner/releases/tag/v2.327.1) ##### Dependency Upgrades - Upgrade [@&#8203;octokit/request-error](https://redirect.github.com/octokit/request-error) and [@&#8203;actions/github](https://redirect.github.com/actions/github) by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1227](https://redirect.github.com/actions/setup-node/pull/1227) - Upgrade uuid from 9.0.1 to 11.1.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1273](https://redirect.github.com/actions/setup-node/pull/1273) - Upgrade undici from 5.28.5 to 5.29.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1295](https://redirect.github.com/actions/setup-node/pull/1295) - Upgrade form-data to bring in fix for critical vulnerability by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1332](https://redirect.github.com/actions/setup-node/pull/1332) - Upgrade actions/checkout from 4 to 5 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1345](https://redirect.github.com/actions/setup-node/pull/1345) ##### New Contributors - [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) made their first contribution in [#&#8203;1348](https://redirect.github.com/actions/setup-node/pull/1348) - [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) made their first contribution in [#&#8203;1325](https://redirect.github.com/actions/setup-node/pull/1325) **Full Changelog**: <actions/setup-node@v4...v5.0.0> ### [`v4.4.0`](https://redirect.github.com/actions/setup-node/releases/tag/v4.4.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v4.3.0...v4.4.0) ##### What's Changed ##### Bug fixes: - Make eslint-compact matcher compatible with Stylelint by [@&#8203;FloEdelmann](https://redirect.github.com/FloEdelmann) in [#&#8203;98](https://redirect.github.com/actions/setup-node/pull/98) - Add support for indented eslint output by [@&#8203;fregante](https://redirect.github.com/fregante) in [#&#8203;1245](https://redirect.github.com/actions/setup-node/pull/1245) ##### Enhancement: - Support private mirrors by [@&#8203;marco-ippolito](https://redirect.github.com/marco-ippolito) in [#&#8203;1240](https://redirect.github.com/actions/setup-node/pull/1240) ##### Dependency update: - Upgrade [@&#8203;action/cache](https://redirect.github.com/action/cache) from 4.0.2 to 4.0.3 by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [#&#8203;1262](https://redirect.github.com/actions/setup-node/pull/1262) ##### New Contributors - [@&#8203;FloEdelmann](https://redirect.github.com/FloEdelmann) made their first contribution in [#&#8203;98](https://redirect.github.com/actions/setup-node/pull/98) - [@&#8203;fregante](https://redirect.github.com/fregante) made their first contribution in [#&#8203;1245](https://redirect.github.com/actions/setup-node/pull/1245) - [@&#8203;marco-ippolito](https://redirect.github.com/marco-ippolito) made their first contribution in [#&#8203;1240](https://redirect.github.com/actions/setup-node/pull/1240) **Full Changelog**: <actions/setup-node@v4...v4.4.0> ### [`v4.3.0`](https://redirect.github.com/actions/setup-node/releases/tag/v4.3.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v4.2.0...v4.3.0) ##### What's Changed ##### Dependency updates - Upgrade [@&#8203;actions/glob](https://redirect.github.com/actions/glob) from 0.4.0 to 0.5.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1200](https://redirect.github.com/actions/setup-node/pull/1200) - Upgrade [@&#8203;action/cache](https://redirect.github.com/action/cache) from 4.0.0 to 4.0.2 by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#8203;1251](https://redirect.github.com/actions/setup-node/pull/1251) - Upgrade [@&#8203;vercel/ncc](https://redirect.github.com/vercel/ncc) from 0.38.1 to 0.38.3 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1203](https://redirect.github.com/actions/setup-node/pull/1203) - Upgrade [@&#8203;actions/tool-cache](https://redirect.github.com/actions/tool-cache) from 2.0.1 to 2.0.2 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1220](https://redirect.github.com/actions/setup-node/pull/1220) ##### New Contributors - [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) made their first contribution in [#&#8203;1251](https://redirect.github.com/actions/setup-node/pull/1251) **Full Changelog**: <actions/setup-node@v4...v4.3.0> ### [`v4.2.0`](https://redirect.github.com/actions/setup-node/releases/tag/v4.2.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v4.1.0...v4.2.0) ##### What's Changed - Enhance workflows and upgrade publish-actions from 0.2.2 to 0.3.0 by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [#&#8203;1174](https://redirect.github.com/actions/setup-node/pull/1174) - Add recommended permissions section to readme by [@&#8203;benwells](https://redirect.github.com/benwells) in [#&#8203;1193](https://redirect.github.com/actions/setup-node/pull/1193) - Configure Dependabot settings by [@&#8203;HarithaVattikuti](https://redirect.github.com/HarithaVattikuti) in [#&#8203;1192](https://redirect.github.com/actions/setup-node/pull/1192) - Upgrade `@actions/cache` to `^4.0.0` by [@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) in [#&#8203;1191](https://redirect.github.com/actions/setup-node/pull/1191) - Upgrade pnpm/action-setup from 2 to 4 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1194](https://redirect.github.com/actions/setup-node/pull/1194) - Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1195](https://redirect.github.com/actions/setup-node/pull/1195) - Upgrade semver from 7.6.0 to 7.6.3 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1196](https://redirect.github.com/actions/setup-node/pull/1196) - Upgrade [@&#8203;types/jest](https://redirect.github.com/types/jest) from 29.5.12 to 29.5.14 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1201](https://redirect.github.com/actions/setup-node/pull/1201) - Upgrade undici from 5.28.4 to 5.28.5 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;1205](https://redirect.github.com/actions/setup-node/pull/1205) ##### New Contributors - [@&#8203;benwells](https://redirect.github.com/benwells) made their first contribution in [#&#8203;1193](https://redirect.github.com/actions/setup-node/pull/1193) **Full Changelog**: <actions/setup-node@v4...v4.2.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/launchdarkly/js-core).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
diff --git a/.github/workflows/dependency-scan.yml b/.github/workflows/dependency-scan.yml
@@ -12,7 +12,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24.x
 
