Skip to content

chore(deps): bump actions/setup-node from 4 to 5 #888

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Oct 1, 2025
Merged

chore(deps): bump actions/setup-node from 4 to 5 #888

merged 1 commit into from
Oct 1, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 8, 2025 •
edited by coderabbitai bot
Loading

Bumps actions/setup-node from 4 to 5.

Release notes

Sourced from actions/setup-node's releases.

v5.0.0

What's Changed

Breaking Changes

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

New Contributors

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

What's Changed

Bug fixes:

Enhancement:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v4...v4.4.0

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • Chores
    • Updated CI workflows to use the latest Node setup action, enhancing reliability and future compatibility.
    • Applied upgrades across pull request testing, pre-release builds, tagged releases, and configuration verification workflows.
    • No changes to application behavior, features, or user-facing functionality.

@dependabot
chore(deps): bump actions/setup-node from 4 to 5
040097e 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 5.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 8, 2025
@coderabbitai coderabbitai
Copy link
Contributor

coderabbitai bot commented Sep 8, 2025 •
edited
Loading

Walkthrough

Updated multiple GitHub Actions workflows to use actions/setup-node@v5 instead of v4, keeping node-version at 20 and leaving all other steps unchanged.

Changes

Cohort / File(s) Summary
CI workflows
.github/workflows/pr-tests.yml, .github/workflows/pre-release-build.yml, .github/workflows/tagged-release.yml, .github/workflows/verify-configs.yml		 Bumped actions/setup-node from @v4 to @v5; no other workflow logic or steps changed; node-version: 20 retained.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

I hopped through YAML fields tonight,
Nudged Node from four to five—just right.
Pipelines purr, the carrots build,
Tags and tests all run as willed.
With whiskers twitching, CI’s bright—
A tiny bump, a smoother flight. 🥕✨

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title Check ✅ Passed The title “chore(deps): bump actions/setup-node from 4 to 5” precisely captures the primary update of upgrading the actions/setup-node GitHub Action from version 4 to 5, follows conventional commit conventions to indicate a dependency maintenance change, and is concise without introducing irrelevant details.
Docstring Coverage ✅ Passed No functions found in the changes. Docstring coverage check skipped.
✨ Finishing touches
🧪 Generate unit tests
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dependabot/github_actions/actions/setup-node-5
📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 3768a06 and 040097e.

📒 Files selected for processing (4)
  • .github/workflows/pr-tests.yml (1 hunks)
  • .github/workflows/pre-release-build.yml (1 hunks)
  • .github/workflows/tagged-release.yml (1 hunks)
  • .github/workflows/verify-configs.yml (1 hunks)
🔇 Additional comments (1)
.github/workflows/verify-configs.yml (1)

13-15: Verify setup-node@v5 caching behavior and runner version

  • package.json lacks a packageManager field, so v5’s implicit dependency caching won’t run; if you need caching, either add "packageManager": "npm@<version>" (or relevant manager) or explicitly set the cache input.
  • Confirm that all runners (especially any self-hosted ones) are on GitHub Actions Runner v2.327.1 or later to support Node 24.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@PeterDaveHello
Copy link
Member

@coderabbitai review

@PeterDaveHello PeterDaveHello requested a review from Copilot October 1, 2025 18:18
@coderabbitai coderabbitai
Copy link
Contributor

coderabbitai bot commented Oct 1, 2025

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Copilot
Copilot AI reviewed Oct 1, 2025
View reviewed changes
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Updates the actions/setup-node GitHub Action from version 4 to version 5 across all workflow files to leverage the latest features and improvements, including automatic package manager detection and caching enhancements.

  • Updates all GitHub workflow files to use actions/setup-node@v5
  • Maintains existing Node.js version 20 configuration
  • Ensures compatibility with the latest action features

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File Description
.github/workflows/verify-configs.yml Updates setup-node action to v5 for config verification workflow
.github/workflows/tagged-release.yml Updates setup-node action to v5 for tagged release workflow
.github/workflows/pre-release-build.yml Updates setup-node action to v5 for pre-release build workflow
.github/workflows/pr-tests.yml Updates setup-node action to v5 for PR testing workflow

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@PeterDaveHello PeterDaveHello merged commit f973bd9 into master Oct 1, 2025
1 check passed
@dependabot dependabot bot deleted the dependabot/github_actions/actions/setup-node-5 branch October 1, 2025 18:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@PeterDaveHello PeterDaveHello PeterDaveHello approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@PeterDaveHello