Repository navigation
chore(deps): bump actions/setup-node from 6.4.0 to 7.1.0 - #76
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
Contributor
|
This is a major version bump (actions/setup-node 6 to 7), so it waits for the one toolchain-upgrade pass after wave 2 (EN10 in the umbrella plans), where each family moves across every repo at once. Leaving it open until then. |
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions/setup-node-7.1.0
branch
4 times, most recently
from
November 8, 2026 02:34
2db4dd7 to
e6c80ae
Compare
NSchatz
added a commit
that referenced
this pull request
Nov 8, 2026
Moves the nightly fuzz onto the shared `nightly-fuzz.yml` in
cosyte/.github, the way dicom and mllp run it. Approved by the operator
on 2026-11-08 ("Approve all (Recommended)").
**Workflow**
- `.github/workflows/fuzz.yml` is replaced by
`.github/workflows/nightly-fuzz.yml`, a caller of the shared workflow
pinned by SHA at `workflows-2026-11-08-c0db8d8e5927`, on a schedule
(04:23 UTC, as before) and on `workflow_dispatch`. Read-only token, no
secrets.
- It runs `pnpm fuzz` with `CLI_FUZZ_SEED` set to the run id and
`CLI_FUZZ_SECONDS=120`, bounded by `timeout 40m` inside the shared job's
60-minute limit: three properties at two minutes each.
- Schedule and dispatch only, so it is never a required check. No
ruleset changes.
- `release.yml`'s note on `pnpm/action-setup` pointed at the deleted
file for its reasoning; it now states the error itself.
**Targets** (`pnpm fuzz`, renamed from `test:fuzz`; the suite moves to
`test/property/fuzz.property.test.ts`, the dicom and mllp layout)
- `run()` over arbitrary argv and input bytes, and over arbitrary argv
with well-formed text on stdin: a documented exit code, never a throw,
never a stack frame on stderr.
- `dispatchTool()` over arbitrary tool names and arguments: a value-free
MCP result, never a throw or stack frame.
**Harness.** `test/property/_fuzz-config.ts` carries the knobs from
dicom and mllp (`CLI_FUZZ_SEED`, `CLI_FUZZ_SECONDS`, `CLI_FUZZ_RUNS` as
a multiplier). The properties are async, so the synchronous per-case CPU
budget does not apply; a hang is caught by the run's `timeout`. The base
count under `pnpm test` is unchanged (300).
**Local run.** `CLI_FUZZ_SEED=108187034 CLI_FUZZ_SECONDS=45 pnpm fuzz`:
three properties at 45 s each, 135 s of fuzzing. Clean. The gate in
CLAUDE.md ran locally in order.
No changeset: nothing published changes (`files` is `dist` and docs).
Dependabot #76 also bumps an action in the deleted `fuzz.yml`, so it
needs a rebase after this merges.
https://claude.ai/code/session_01MXLcW95gf97vs9RBU1YsXf
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.1.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@48b55a0...949feb2) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions/setup-node-7.1.0
branch
from
November 8, 2026 14:47
e6c80ae to
c3d1c41
Compare
Contributor
|
Superseded by #101, which moves actions/setup-node to 7.1.0 in ci.yml and release.yml along with the rest of the dev-toolchain pass. |
Contributor
Author
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
Bot
deleted the
dependabot/github_actions/actions/setup-node-7.1.0
branch
November 8, 2026 17:48
NSchatz
added a commit
that referenced
this pull request
Nov 8, 2026
We move cli onto the shared `@cosyte/process` and take the dev-toolchain updates the other libraries took (EN10). This supersedes #76. ## Process - `build`, `typecheck`, `lint`, `lint:fix`, `format`, `format:check`, `test`, `test:watch` and `test:coverage` are now exactly `cosyte-process <verb>`. `check:process` runs `cosyte-process check` and is added to the `documents` job in `ci.yml`. - `cosyte-process.config.json` keeps the old format coverage (`examples/**/*.{ts,js,json,md}` on top of the baseline). Lint uses the baseline globs, which equal the old ones. - Removed devDependencies: `tsup`, `eslint`, `prettier`, `@vitest/coverage-v8`, `typescript` (nothing imports the compiler API) and `@cosyte/test-utils` (declared but never imported: its runners are parser conformance and parser PHI-leak checks, and cli parses nothing itself). `vitest` stays, pinned to 5.1.0, because the tests import it. - `typecheck:examples` and `lint:examples` run the tsc and eslint that process pins, through `scripts/process-tool.mjs` (from ccda and x12). - `pack:docs` is `cosyte-process pack-docs`; `scripts/build-docs-artifacts.sh` is deleted. Both archives have the same members as before. - `version` keeps `scripts/sync-version.mjs` (it writes `src/core/version.ts` and the version in `docs-content/installation.md`, which process's `sync-version` does not) and ends with `cosyte-process format`. - esbuild override moves to `esbuild@>=0.27.3 <0.28.2` -> 0.28.2, matching config's drift manifest. ## Updates | Package | From | To | | --- | --- | --- | | tsup (via process) | 8.5.1 | 9.0.0 | | vitest, @vitest/coverage-v8 | 4.1.12 | 5.1.0 | | eslint (via process) | 10.5.0 | 10.14.0 | | prettier (via process) | 3.8.3 | 3.9.10 | | fast-check | 3.23.2 | 4.10.2 | | vite | 7.3.7 | 8.3.6 | | @arethetypeswrong/cli | 0.18.4 | 0.18.5 | | simple-git-hooks | 2.13.0 | 2.14.0 | | @cosyte/process | (new) | ^0.1.7 | | @cosyte/eslint-config, tsup-config, vitest-config, script-utils | ^0.1.2, ^0.1.2, ^0.1.2, ^0.1.7 | ^0.1.4, ^0.1.3, ^0.1.3, ^0.1.8 | | actions/setup-node | 6.4.0 | 7.1.0 (#76; no `registry-url` here, so the npm token change does not apply) | Held: `@types/node` stays on 22. `.github/dependabot.yml` now ignores its majors, and ignores `vitest`, which moves only when process does. ## Workflows - Every cosyte/.github caller moves from `workflows-2026-11-08-c0db8d8e5927` to `workflows-2026-11-08-810a8affe9de`. The only change between them is cosyte/.github#112, which empties the `expect-unpublished-deps` default. Job ids and the other inputs are unchanged, so the required contexts are the same. - The `ci.yml` comment that called that default stale now says it is empty upstream, and what it used to be. ## The MCP SDK and the install matrix tsup 9 keeps the SDK behind the launcher: in all four built bins the SDK appears only in `src/mcp/launch.ts`'s dynamic `import()`. `test/absent-mcp-sdk.test.ts` passes, and `pnpm smoke` runs both bins with the SDK hidden (exit 69, value-free line). `scripts/release-install-gate.mjs` passes. A clean-room install of the packed tarball with `npm install`, `npm install --omit=optional`, `npm install --legacy-peer-deps` and `pnpm add` each exits 0; `cosyte --version` and HL7 parse work in all four, FHIR parse and `convert --to fhir` work in all but `--omit=optional`, where they and `cosyte mcp` exit 69, as in 0.1.6. ## Published files The file list is the same apart from the renamed declaration chunk (`io-*.d.ts`). Every `.mjs`, `.cjs` and source map is byte-identical to `main`. The `.d.ts` files change: type-only exports sit in their own `export type {}`, and `mcp.d.ts` imports `CliCode` and `RunDeps` from `./index.js` instead of the chunk. A patch changeset records it. `pnpm attw` passes. ## Gate Run locally on Node 26.10 with pnpm 10.34.5, from a frozen install: typecheck, lint, format:check, phi-scan, test (665 passed, as on `main`), test:coverage (same totals as `main`), build, attw, smoke, typecheck:examples, lint:examples, examples, phi-scan:examples, fuzz, check:no-emdash, check:no-internal-refs, check:readme, check:claude-card, check:catalog, check:process. The `version` script was run in a scratch worktree: it wrote 0.1.7 to `package.json`, `src/core/version.ts`, `docs-content/installation.md` and `CHANGELOG.md` and left a formatted tree. https://claude.ai/code/session_01MXLcW95gf97vs9RBU1YsXf
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps actions/setup-node from 6.4.0 to 7.1.0.
Release notes
Sourced from actions/setup-node's releases.
... (truncated)
Commits
949feb2Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)7207c4fchore: update dependencies and add license files (#1642)54337e0Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)fb54fa8Bump jest-each from 30.4.1 to 30.5.2 (#1636)7f84f1dBump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)0c54c7bBump@typescript-eslint/parserfrom 8.62.0 to 8.70.0 (#1615)a829419Bump@types/semverfrom 7.7.1 to 7.8.0 (#1616)680d1e4Support absolute paths in node-version-file (#1633)db0fb3aBump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)94196eeBump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)