chore(deps): update github actions (major) by renovate[bot] · Pull Request #60 · TangibleInc/object

renovate · 2026-07-20T07:59:53Z

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	major	`v6` → `v7`
amannn/action-semantic-pull-request	action	major	`v5` → `v6`
googleapis/release-please-action	action	major	`v4` → `v5`

Release Notes

actions/setup-node (actions/setup-node)

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
Migrate to ESM and upgrade dependencies by @gowridurgad in #1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
Only use mirrorToken in getManifest if it's provided by @deiga in #1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
docs: Update restore-only cache documentation by @priya-kinthali in #1550
docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569

New Contributors

@chiranjib-swain made their first contribution in #1536
@deiga made their first contribution in #1548
@jasongin made their first contribution in #1569

Full Changelog: actions/setup-node@v6...v7.0.0

`v7`

Compare Source

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

`v6.4.0`

Compare Source

What's Changed

Dependency updates:

Upgrade @actions dependencies by @Copilot in #1525
Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in #1533

New Contributors

@Copilot made their first contribution in #1525

Full Changelog: actions/setup-node@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Documentation

Documentation update related to absence of Lockfile by @mahabaleshwars in #1454
Correct mirror option typos by @MikeMcC399 in #1442
Readme update on checkout version v6 by @deining in #1446
Readme typo fixes @munyari in #1226
Advanced document update on checkout version v6 by @aparnajyothi-y in #1468

Dependency updates:

Upgrade @actions/cache to v5.0.1 by @salmanmkc in #1449

New Contributors

@mahabaleshwars made their first contribution in #1454
@MikeMcC399 made their first contribution in #1442
@deining made their first contribution in #1446
@munyari made their first contribution in #1226

Full Changelog: actions/setup-node@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

amannn/action-semantic-pull-request (amannn/action-semantic-pull-request)

`v6.1.1`

Compare Source

Bug Fixes

Parse headerPatternCorrespondence properly (#295) (800da4c)

`v6.1.0`

Compare Source

Features

Support providing regexps for types (#292) (a30288b)

Bug Fixes

Remove trailing whitespace from "unknown release type" error message (#291) (afa4edb)

`v6.0.1`

Compare Source

Bug Fixes

Actually execute action (#289) (58e4ab4)

`v6.0.0`

Compare Source

⚠ BREAKING CHANGES

Upgrade action to use Node.js 24 and ESM (#287)

Features

Upgrade action to use Node.js 24 and ESM (#287) (bc0c9a7)

`v6`

Compare Source

`v5.5.3`

Compare Source

Bug Fixes

Bump braces dependency (#269. by @EelcoLos) (2d952a1)

`v5.5.2`

Compare Source

Bug Fixes

Bump tar from 6.1.11 to 6.2.1 (#262 by @EelcoLos) (9a90d5a)

`v5.5.1`

Compare Source

Bug Fixes

Bump ip from 2.0.0 to 2.0.1 (#263 by @EelcoLos) (5e7e9ac)

`v5.5.0`

Compare Source

Features

Add outputs for type, scope and subject (#261 by @bcaurel) (b05f5f6)

`v5.4.0`

Compare Source

Features

Use github.api_url as default for githubBaseUrl (#243 by @fty4) (4d5734a)

`v5.3.0`

Compare Source

Features

Use Node.js 20 in action (#240) (4c0d5a2)

`v5.2.0`

Compare Source

Features

Update dependencies by @EelcoLos (#229) (e797448)

`v5.1.0`

Compare Source

Features

Add regex support to scope and disallowScopes configuration (#226) (403a6f8)

`v5.0.2`

Compare Source

Features

Add regex support to scope and disallowScopes configuration (#226) (403a6f8)

5.0.2 (2022-10-17)

Bug Fixes

Upgrade @actions/core to avoid deprecation warnings (#208) (91f4126)

5.0.1 (2022-10-14)

Bug Fixes

Upgrade GitHub Action to use Node v16 (#207) (6282ee3)

`v5.0.1`

Compare Source

Features

Add regex support to scope and disallowScopes configuration (#226) (403a6f8)

5.0.2 (2022-10-17)

Bug Fixes

Upgrade @actions/core to avoid deprecation warnings (#208) (91f4126)

5.0.1 (2022-10-14)

Bug Fixes

Upgrade GitHub Action to use Node v16 (#207) (6282ee3)

googleapis/release-please-action (googleapis/release-please-action)

`v5.0.0`

Compare Source

⚠ BREAKING CHANGES

upgrade to node24 (#1188)

Features

upgrade to node24 (#1188) (46dfc01)

Bug Fixes

bump release-please from 17.3.0 to 17.6.0 (#1199) (f533c26)

Bug Fixes

bump release-please from 17.1.3 to 17.3.0 (#1183) (ef9c274)

`v4.4.0`

Compare Source

Features

add ability to select versioning-strategy and release-as (#1121) (ee0f5ba)

Bug Fixes

changelog-host parameter ignored when using manifest configuration (#1151) (535c413)
bump mocha from 11.7.1 to 11.7.2 in the npm_and_yarn group across 1 directory (#1149) (3612a99)
bump release-please from 17.1.2 to 17.1.3 (#1158) (66fbfe9)