Skip to content

chore(deps): update actions/setup-node action to v7 #36

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update actions/setup-node action to v7 #36

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/foundation-gate.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@ jobs:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
with:
persist-credentials: false
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0

@devin-ai-integration devin-ai-integration Bot Aug 11, 2026 •
edited
Loading

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔍 Verify the pinned commit SHA actually corresponds to setup-node v7.0.0

Both spec-lint and sdk-types jobs now pin actions/setup-node to commit 820762786026740c76f36085b0efc47a31fe5020 with the comment # v7.0.0. The comment is the only human-readable link between the SHA and the release tag, and the repo relies on SHA pinning as a supply-chain control everywhere else (checkout, oasdiff checksum verification). Worth confirming the SHA matches the upstream v7.0.0 tag before merge, and that setup-node v7 still supports the runner image used (ubuntu-latest) with node-version: '22'.

Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

with:
node-version: '22'
- name: Lint openapi.yaml (fail on errors)
Expand All @@ -71,7 +71,7 @@ jobs:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
with:
persist-credentials: false
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: '22'
- name: Install tooling
Expand Down
Loading