From cd69c0edf08e97abf5ae509a4bcd70e23cfe6951 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Oct 2026 16:22:38 +0000 Subject: [PATCH] chore(ci): bump the actions group across 1 directory with 7 updates Bumps the actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` | | [pnpm/action-setup](https://github.com/pnpm/action-setup) | `4` | `6` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `7` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5` | `7` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4` | `5` | Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `pnpm/action-setup` from 4 to 6 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/v4...v6) Updates `actions/setup-node` from 4 to 7 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4...v7) Updates `codecov/codecov-action` from 5 to 7 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/v5...v7) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `actions/download-artifact` from 4 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v8) Updates `actions/dependency-review-action` from 4 to 5 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/dependency-review-action dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: codecov/codecov-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: pnpm/action-setup dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 66 +++++++++++++++---------------- .github/workflows/integration.yml | 6 +-- .github/workflows/mutation.yml | 8 ++-- .github/workflows/release.yml | 12 +++--- 4 files changed, 46 insertions(+), 46 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c3f08592..c0a7b70a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -22,11 +22,11 @@ jobs: name: Quality runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@v4 + - uses: actions/checkout@v7 + - uses: pnpm/action-setup@v6 with: run_install: false - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 22.13.0 cache: pnpm @@ -52,11 +52,11 @@ jobs: matrix: node: [22.13.0, 24.x] steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@v4 + - uses: actions/checkout@v7 + - uses: pnpm/action-setup@v6 with: run_install: false - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: ${{ matrix.node }} cache: pnpm @@ -64,7 +64,7 @@ jobs: - run: pnpm run test:coverage - name: Upload coverage if: matrix.node == '22.13.0' - uses: codecov/codecov-action@v5 + uses: codecov/codecov-action@v7 with: files: coverage/lcov.info fail_ci_if_error: true @@ -74,11 +74,11 @@ jobs: name: Package artifact runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@v4 + - uses: actions/checkout@v7 + - uses: pnpm/action-setup@v6 with: run_install: false - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 22.13.0 cache: pnpm @@ -90,7 +90,7 @@ jobs: mkdir -p artifacts pnpm pack --pack-destination artifacts mv artifacts/*.tgz artifacts/fleetbase-sdk.tgz - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: npm-package path: artifacts/*.tgz @@ -107,12 +107,12 @@ jobs: os: [ubuntu-latest, macos-latest, windows-latest] node: [20.19.4, 22.13.0, 24.x] steps: - - uses: actions/checkout@v4 - - uses: actions/download-artifact@v4 + - uses: actions/checkout@v7 + - uses: actions/download-artifact@v8 with: name: npm-package path: artifacts - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: ${{ matrix.node }} - name: Install exact candidate @@ -135,14 +135,14 @@ jobs: matrix: manager: [npm, pnpm, yarn, bun] steps: - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v8 with: name: npm-package path: artifacts - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 22.13.0 - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@v6 if: matrix.manager == 'pnpm' with: version: 11.24.0 @@ -179,12 +179,12 @@ jobs: resolution: [node16, nodenext, bundler] typescript: [5.0.4, 6.0.2] steps: - - uses: actions/checkout@v4 - - uses: actions/download-artifact@v4 + - uses: actions/checkout@v7 + - uses: actions/download-artifact@v8 with: name: npm-package path: artifacts - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 22.13.0 - name: Install exact candidate and TypeScript @@ -203,15 +203,15 @@ jobs: matrix: fixture: [vite, webpack, esbuild, react, vue, svelte, angular, ember, next, nuxt, expo, edge] steps: - - uses: actions/checkout@v4 - - uses: actions/download-artifact@v4 + - uses: actions/checkout@v7 + - uses: actions/download-artifact@v8 with: name: npm-package path: artifacts - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 24.15.0 - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@v6 with: version: 11.24.0 - name: Install pinned fixture dependencies @@ -229,15 +229,15 @@ jobs: needs: package runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/download-artifact@v4 + - uses: actions/checkout@v7 + - uses: actions/download-artifact@v8 with: name: npm-package path: artifacts - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 24.15.0 - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@v6 with: version: 11.24.0 - name: Install pinned browser dependencies @@ -258,8 +258,8 @@ jobs: if: github.event_name == 'pull_request' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/dependency-review-action@v4 + - uses: actions/checkout@v7 + - uses: actions/dependency-review-action@v5 with: fail-on-severity: high @@ -267,11 +267,11 @@ jobs: name: Dependency audit runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@v4 + - uses: actions/checkout@v7 + - uses: pnpm/action-setup@v6 with: run_install: false - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 22.13.0 cache: pnpm diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml index ffd6877e..b8a9888c 100644 --- a/.github/workflows/integration.yml +++ b/.github/workflows/integration.yml @@ -42,13 +42,13 @@ jobs: - name: Record skipped scheduled run if: github.event_name == 'schedule' && env.FLEETBASE_PUBLIC_KEY == '' run: echo 'Live API smoke skipped because FLEETBASE_PUBLIC_KEY is not configured.' >> "$GITHUB_STEP_SUMMARY" - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 if: env.FLEETBASE_PUBLIC_KEY != '' - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@v6 if: env.FLEETBASE_PUBLIC_KEY != '' with: run_install: false - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 if: env.FLEETBASE_PUBLIC_KEY != '' with: node-version: 22.13.0 diff --git a/.github/workflows/mutation.yml b/.github/workflows/mutation.yml index 918b3e23..710277bf 100644 --- a/.github/workflows/mutation.yml +++ b/.github/workflows/mutation.yml @@ -18,11 +18,11 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@v4 + - uses: actions/checkout@v7 + - uses: pnpm/action-setup@v6 with: run_install: false - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 24.x cache: pnpm @@ -30,7 +30,7 @@ jobs: - run: pnpm run test:mutation - name: Upload mutation report if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: mutation-report-${{ github.sha }} path: reports/mutation diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 28c1f9a9..3a569eaa 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -49,16 +49,16 @@ jobs: echo "::error::NPM_AUTH_TOKEN must be available to this repository and authorized to publish @fleetbase/sdk." exit 1 fi - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: # Never tag whatever main happens to point at when the job starts. ref: ${{ github.event.pull_request.merge_commit_sha || github.sha }} fetch-depth: 0 persist-credentials: false - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@v6 with: run_install: false - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 24.15.0 cache: pnpm @@ -87,7 +87,7 @@ jobs: run: node scripts/verify-published.mjs - name: Preserve release evidence if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: npm-release-${{ github.sha }} path: artifacts/ @@ -121,12 +121,12 @@ jobs: env: RELEASE_TAG: ${{ needs.release.outputs.tag || format('v{0}', inputs.version) }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: ref: ${{ github.event.pull_request.merge_commit_sha || github.sha }} fetch-depth: 0 persist-credentials: false - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 24.15.0 registry-url: https://npm.pkg.github.com