Skip to content

chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 in the github-actions group#10813

Merged
jasonsaayman merged 1 commit intov1.xfrom
dependabot/github_actions/github-actions-366259472f
Apr 28, 2026
Merged

chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 in the github-actions group#10813
jasonsaayman merged 1 commit intov1.xfrom
dependabot/github_actions/github-actions-366259472f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 28, 2026

Bumps the github-actions group with 1 update: actions/setup-node.

Updates actions/setup-node from 6.3.0 to 6.4.0

Release notes

Sourced from actions/setup-node's releases.

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Bump actions/setup-node from 6.3.0 to 6.4.0 across all GitHub Actions workflows to keep Node setup current and pick up upstream @actions updates. No workflow logic changes; expected to improve CI reliability.

Description

  • Summary of changes
    • Updated actions/setup-node to 6.4.0 in all workflows that pin it.
  • Reasoning
    • Aligns with upstream updates (new Node versions metadata and internal @actions deps).
    • Keeps Node 24.x resolution and caching behavior current.
  • Additional context
    • Only action versions changed (pinned SHAs). No runtime or build logic changes.

Docs

  • Update /docs/ci.md (or equivalent in /docs/) to reference actions/setup-node@v6.4.0 and note the pin.

Testing

  • No tests added or modified.
  • No new tests needed; this is CI infrastructure. Validate by ensuring all workflows run green and the npm cache restores correctly.

Semantic version impact

  • None. Infrastructure-only change; no package release required. If released, treat as patch.

Written for commit 3e85a2f. Summary will update on new commits. Review in cubic

Bumps the github-actions group with 1 update: [actions/setup-node](https://github.com/actions/setup-node).


Updates `actions/setup-node` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@53b8394...48b55a0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added commit::chore The PR is related to a chore type::automated-pr The PR has been created by an automation labels Apr 28, 2026
@dependabot dependabot Bot requested a review from jasonsaayman as a code owner April 28, 2026 10:18
@dependabot dependabot Bot added commit::chore The PR is related to a chore type::automated-pr The PR has been created by an automation labels Apr 28, 2026
Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 6 files

Confidence score: 5/5

  • Automated review surfaced no issues in the provided summaries.
  • No files require special attention.

@jasonsaayman jasonsaayman merged commit bd88727 into v1.x Apr 28, 2026
31 of 32 checks passed
@jasonsaayman jasonsaayman deleted the dependabot/github_actions/github-actions-366259472f branch April 28, 2026 12:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

commit::chore The PR is related to a chore type::automated-pr The PR has been created by an automation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant