Repository navigation
ci: bump actions/setup-node from 7.0.0 to 7.1.0 - #142
Merged
abruption merged 3 commits intoOct 27, 2026
Merged
Conversation
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 7.0.0 to 7.1.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
abruption
marked this pull request as draft
October 27, 2026 00:43
abruption
marked this pull request as ready for review
October 27, 2026 00:43
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
abruption
deleted the
dependabot/github_actions/actions/setup-node-7.1.0
branch
October 27, 2026 00:51
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Update every
actions/setup-nodeinvocation from v7.0.0 to v7.1.0, pinned to the upstream tag's commit949feb2413d6458794dcd2491c4babbbce0c15c1. Refresh this PR against current main and include the newer Windows qualification, identity, observer and Linux research workflows so all 20 invocations use the same reviewed version.This stays within the existing v7 action line (Node 24 action runtime). Existing Node version selections, cache settings, permissions and authentication inputs are unchanged. Upstream v7.1.0 includes version validation/manifest-fetch retries and dependency updates; this PR does not claim an independently demonstrated runtime vulnerability in codex-unlock.
Local validation on macOS arm64 / Node 24:
npm ci,npm run check,npm run lint,npm test(290 tests: 287 pass, 3 Linux-only skips),npm run smoke:package, andgit diff --checkall pass. Upstream v7.1.0 tag-to-commit andaction.ymlruntime were checked through GitHub's API. The existing development-only fast-uri advisory is handled separately with the dependency refresh.Latest-head GitHub CI and automatic Codex Code/Security review are pending. Local checks do not exercise the hosted action runtime or Windows runners; those remain CI gates before merge.
Final verification: all 53 checks completed successfully (or neutral where applicable), and current-head Codex Code Review and Security Review completed without findings for
270cb5c60f677bcb5f7756dcfd7a936d7c2b0ad0. Merged after these gates passed.