chore(deps): bump actions/setup-node from 4 to 5 #888

v5.0.0

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in actions/setup-node#1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false
steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
 with:
 package-manager-cache: false
Upgrade action to use node24 by @salmanmkc in actions/setup-node#1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in actions/setup-node#1227

Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in actions/setup-node#1273

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-node#1295

Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in actions/setup-node#1332

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-node#1345

New Contributors

@priya-kinthali made their first contribution in actions/setup-node#1348

@salmanmkc made their first contribution in actions/setup-node#1325

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

What's Changed

Bug fixes:

Make eslint-compact matcher compatible with Stylelint by @FloEdelmann in actions/setup-node#98

Add support for indented eslint output by @fregante in actions/setup-node#1245

Enhancement:

Support private mirrors by @marco-ippolito in actions/setup-node#1240

Dependency update:

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in actions/setup-node#1262

New Contributors

@FloEdelmann made their first contribution in actions/setup-node#98

@fregante made their first contribution in actions/setup-node#1245

@marco-ippolito made their first contribution in actions/setup-node#1240

Full Changelog: actions/setup-node@v4...v4.4.0

... (truncated)

Commits

a0853c2 Bump actions/checkout from 4 to 5 (#1345)
b7234cc Upgrade action to use node24 (#1325)
d7a1131 Enhance caching in setup-node with automatic package manager detection (#1348)
5e2628c Bumps form-data (#1332)
65becef Bump undici from 5.28.5 to 5.29.0 (#1295)
7e24a65 Bump uuid from 9.0.1 to 11.1.0 (#1273)
08f58d1 Bump @octokit/request-error and @actions/github (#1227)
See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

Chores
- Updated CI workflows to use the latest Node setup action, enhancing reliability and future compatibility.
- Applied upgrades across pull request testing, pre-release builds, tagged releases, and configuration verification workflows.
- No changes to application behavior, features, or user-facing functionality.

@dependabot


 chore(deps): bump actions/setup-node from 4 to 5

040097e

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 5.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v5)
---
updated-dependencies:
- dependency-name: actions/setup-node
 dependency-version: '5'
 dependency-type: direct:production
 update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>

@dependabot dependabot bot added dependencies github_actions labels

Sep 8, 2025

@coderabbitai coderabbitai

Copy link

Contributor

coderabbitai bot commented Sep 8, 2025 •

edited

Loading

Walkthrough

Updated multiple GitHub Actions workflows to use actions/setup-node@v5 instead of v4, keeping node-version at 20 and leaving all other steps unchanged.

Changes

Cohort / File(s)	Summary
CI workflows `.github/workflows/pr-tests.yml`, `.github/workflows/pre-release-build.yml`, `.github/workflows/tagged-release.yml`, `.github/workflows/verify-configs.yml`	Bumped `actions/setup-node` from `@v4` to `@v5`; no other workflow logic or steps changed; `node-version: 20` retained.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

I hopped through YAML fields tonight,
Nudged Node from four to five—just right.
Pipelines purr, the carrots build,
Tags and tests all run as willed.
With whiskers twitching, CI’s bright—
A tiny bump, a smoother flight. 🥕✨

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title Check	✅ Passed	The title "chore(deps): bump actions/setup-node from 4 to 5" precisely captures the primary update of upgrading the actions/setup-node GitHub Action from version 4 to 5, follows conventional commit conventions to indicate a dependency maintenance change, and is concise without introducing irrelevant details.
Docstring Coverage	✅ Passed	No functions found in the changes. Docstring coverage check skipped.

✨ Finishing touches

🧪 Generate unit tests

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch dependabot/github_actions/actions/setup-node-5

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 3768a06 and 040097e.

📒 Files selected for processing (4)

.github/workflows/pr-tests.yml (1 hunks)
.github/workflows/pre-release-build.yml (1 hunks)
.github/workflows/tagged-release.yml (1 hunks)
.github/workflows/verify-configs.yml (1 hunks)

🔇 Additional comments (1)

.github/workflows/verify-configs.yml (1)

13-15: Verify setup-node@v5 caching behavior and runner version

package.json lacks a packageManager field, so v5’s implicit dependency caching won’t run; if you need caching, either add "packageManager": "npm@<version>" (or relevant manager) or explicitly set the cache input.

Confirm that all runners (especially any self-hosted ones) are on GitHub Actions Runner v2.327.1 or later to support Node 24.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

@PeterDaveHello

Copy link

Member

PeterDaveHello commented Oct 1, 2025

@coderabbitai review

@PeterDaveHello PeterDaveHello requested a review from Copilot

October 1, 2025 18:18

@coderabbitai coderabbitai

Copy link

Contributor

coderabbitai bot commented Oct 1, 2025

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Copilot

Copilot AI reviewed

Oct 1, 2025

View reviewed changes

Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Updates the actions/setup-node GitHub Action from version 4 to version 5 across all workflow files to leverage the latest features and improvements, including automatic package manager detection and caching enhancements.

Updates all GitHub workflow files to use actions/setup-node@v5
Maintains existing Node.js version 20 configuration
Ensures compatibility with the latest action features

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File	Description
.github/workflows/verify-configs.yml	Updates setup-node action to v5 for config verification workflow
.github/workflows/tagged-release.yml	Updates setup-node action to v5 for tagged release workflow
.github/workflows/pre-release-build.yml	Updates setup-node action to v5 for pre-release build workflow
.github/workflows/pr-tests.yml	Updates setup-node action to v5 for PR testing workflow

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

PeterDaveHello

PeterDaveHello approved these changes

Oct 1, 2025

View reviewed changes

@PeterDaveHello PeterDaveHello merged commit f973bd9 into master

Oct 1, 2025

1 check passed

@dependabot dependabot bot deleted the dependabot/github_actions/actions/setup-node-5 branch

October 1, 2025 18:29

Labels

dependencies github_actions

1 participant

@PeterDaveHello

chore(deps): bump actions/setup-node from 4 to 5 #888

chore(deps): bump actions/setup-node from 4 to 5 #888

Uh oh!

Conversation

@dependabot dependabot bot commented on behalf of github Sep 8, 2025 • edited by coderabbitai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.0.0

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

v4.4.0

What's Changed

Bug fixes:

Enhancement:

Dependency update:

New Contributors

Summary by CodeRabbit

Uh oh!

coderabbitai bot commented Sep 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Poem

Pre-merge checks and finishing touches

Uh oh!

PeterDaveHello commented Oct 1, 2025

Uh oh!

coderabbitai bot commented Oct 1, 2025

Uh oh!

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Reviewed Changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

@dependabot dependabot bot commented on behalf of github Sep 8, 2025 •

edited by coderabbitai bot

Loading

coderabbitai bot commented Sep 8, 2025 •

edited

Loading