Skip to content

chore(deps): bump actions/setup-node from 6.4.0 to 7.1.0 - #61

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-7.1.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-7.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps actions/setup-node from 6.4.0 to 7.1.0.

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

v7.0.0

What's Changed

Enhancements:

... (truncated)

Commits
  • 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
  • 7207c4f chore: update dependencies and add license files (#1642)
  • 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
  • fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
  • 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
  • 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
  • a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
  • 680d1e4 Support absolute paths in node-version-file (#1633)
  • db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
  • 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 14, 2026
@NSchatz

NSchatz commented Nov 8, 2026

Copy link
Copy Markdown
Contributor

This moves actions/setup-node across a major version (6 to 7), so it waits for the one toolchain-upgrade pass after wave 2 (EN10), which moves each major across every repo at once. Leaving it open until then.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-7.1.0 branch from 49659f1 to e54b629 Compare November 8, 2026 01:41
@dependabot
dependabot Bot requested a review from NSchatz as a code owner November 8, 2026 01:41
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.1.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@48b55a0...949feb2)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump actions/setup-node from 6.4.0 to 7.1.0 chore(deps): bump actions/setup-node from 6.4.0 to 7.1.0 Nov 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-7.1.0 branch from e54b629 to 60a1550 Compare November 8, 2026 02:31
@NSchatz

NSchatz commented Nov 8, 2026

Copy link
Copy Markdown
Contributor

Superseded by #90, which takes actions/setup-node 7.1.0 in both jobs together with the shared @cosyte/process adoption.

@NSchatz NSchatz closed this Nov 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 8, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/setup-node-7.1.0 branch November 8, 2026 17:37
NSchatz added a commit that referenced this pull request Nov 8, 2026
We move transform onto the shared `@cosyte/process` (0.1.7) and the
shared config packages from cosyte/config, and take the repository's
held Dependabot and dev-toolchain updates in the same pass.

## What changed

- `build`, `typecheck`, `lint`, `lint:fix`, `format`, `format:check`,
`test`, `test:watch` and `test:coverage` are now exactly `cosyte-process
<verb>`. `check:process` (`cosyte-process check`) is new and runs in the
required `standards` job, so a test script body can no longer narrow
which suites run without CI noticing (the banners in `ci.yml` and
`vitest.config.ts` say so now).
- `cosyte-process.config.json` keeps this repository's wider `format`
globs (`examples/**/*.{ts,js,json,md}`). The `lint` globs equal
process's baseline, so they need no override.
- `typecheck:examples` and `lint:examples` run process's own `tsc` and
`eslint` through `scripts/process-tool.mjs` (the x12 helper): the
examples import the built package, so they cannot fold into the verbs CI
runs before the build. Both stay in the required `examples` job; we
checked `typecheck:examples` goes red on an injected type error.
- `version` is `changeset version && cosyte-process sync-version &&
cosyte-process format`, and `pack:docs` is `cosyte-process pack-docs`
(same archive members as before). `scripts/sync-version.mjs` and
`scripts/build-docs-artifacts.sh` are removed.
- devDependencies removed: `tsup`, `eslint`, `@vitest/coverage-v8`,
`typescript` (nothing here imports the compiler API). Kept and pinned to
process's versions: `vitest` 5.1.0 (the tests import it) and `prettier`
3.9.10 (`changeset version` formats `CHANGELOG.md` with the prettier it
resolves from the repository root, and the changelog test imports it).
Dependabot now leaves both to move with process.
- `@cosyte/process ^0.1.7` added; floors moved to `eslint-config
^0.1.4`, `tsup-config ^0.1.3`, `script-utils ^0.1.8`, `test-utils
^0.1.3` and `^0.1.2`/`^0.1.3` for the rest. The published
`peerDependencies` (`@cosyte/fhir ^0.1.0`, `@cosyte/hl7 ^0.1.0`) are
unchanged.
- The esbuild override moves to `"esbuild@>=0.27.3 <0.28.2": "0.28.2"`,
matching config's drift manifest.
- Toolchain moves the other libraries took: fast-check 4.10.2, vite
8.3.6, `@arethetypeswrong/cli` 0.18.5, tsx 4.23.15, simple-git-hooks
2.14.0. Prettier 3.9.10 reformats four test and script files.
- `@cosyte/test-utils`: the issue-code tripwire now uses `sortedCodeSet`
instead of a local `Object.values(...).sort()`. The rest of the property
suites are transform-specific (sentinel checks over issues, bundle
references, emit validity); nothing else in test-utils matches them.
- `vitest.config.ts` drops `globals: false`, `environment: "node"` and
`hookTimeout: 10_000` (vitest's defaults) and comments the remaining
`include` and `testTimeout`.
- `test/scripts/changelog-generation.test.ts` reads the format globs
from `cosyte-process.config.json` instead of the old script bodies.
- AGENTS.md names Node.js 22.22.2 as the floor for the dev tooling; the
package's own `engines` stays `>=22.0.0`. CI's `"22"` already resolves
to a newer 22.x.

## Published files

Same file list. `index.mjs` and `index.cjs` are byte-identical to main.
`index.d.ts` and `index.d.cts` differ in two places: tsup 9 writes the
type-only exports as a separate `export type { ... }` statement (the 135
exported names and which are type-only are identical), and the `VERSION`
doc comment names `cosyte-process sync-version`. The source maps differ
only in that comment's embedded source. `attw` passes. A patch changeset
covers it.

## Gate

Full gate run locally on Node 26 with pnpm 10.34.5 after a clean
install: typecheck, lint, format:check, phi-scan, test (856 passed, as
on main), test:coverage (same thresholds), build, attw,
typecheck:examples, lint:examples, examples, phi-scan:examples,
check:readme, check:claude-card, check:catalog, check:process,
check:no-emdash, check:no-internal-refs. All green. No required check
context changes.

## Dependabot

| PR | update | action |
| --- | --- | --- |
| #61 | actions/setup-node 6.4.0 to 7.1.0 | taken here (no
`registry-url` in these jobs); #61 closed |

Added the `@types/node` major ignore, which was missing. Held, as across
the libraries: changesets 3 (separate task), TypeScript 7 (stays with
process), `@types/node` majors (stay on 22).

https://claude.ai/code/session_01MXLcW95gf97vs9RBU1YsXf
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant