From 265507d015fce1125fc320abd981709b35b4a024 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 4 Oct 2026 21:09:31 +0000 Subject: [PATCH 1/7] chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5.0.0 to 7.0.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/a0853c24544627f65ddf259abe73b1d18a591444...820762786026740c76f36085b0efc47a31fe5020) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 4 ++-- .github/workflows/release-and-publish.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4398320ef..03c5b7160 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1246,7 +1246,7 @@ jobs: if: needs.detect-release.outputs.is-release != 'true' with: bun-version: "1.3.13" - - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 if: needs.detect-release.outputs.is-release != 'true' with: node-version: "22" @@ -1423,7 +1423,7 @@ jobs: - name: Smoke tests if: github.event_name == 'merge_group' && needs.detect-release.outputs.is-release != 'true' run: bun test tests/smoke --timeout 120000 - - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 # Pin a Node with flag-free node:sqlite (22.13+) for the #1873 repro below, # which drives the DB layer under Node via the node:sqlite fallback. Matches # the node-version used by the package-check job. diff --git a/.github/workflows/release-and-publish.yml b/.github/workflows/release-and-publish.yml index 1dc65cc82..295903c60 100644 --- a/.github/workflows/release-and-publish.yml +++ b/.github/workflows/release-and-publish.yml @@ -128,7 +128,7 @@ jobs: with: bun-version: "1.3.13" - - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: "22" registry-url: "https://registry.npmjs.org" From 6fb5bf3671c212ffeb0e66e3882bf02db4e92ab5 Mon Sep 17 00:00:00 2001 From: Test User Date: Tue, 6 Oct 2026 06:03:41 -0500 Subject: [PATCH 2/7] chore(deps): add pending release fragment for PR #3077 --- docs/releases/pending/3077-setup-node-v7.md.md | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 docs/releases/pending/3077-setup-node-v7.md.md diff --git a/docs/releases/pending/3077-setup-node-v7.md.md b/docs/releases/pending/3077-setup-node-v7.md.md new file mode 100644 index 000000000..6fbb9a183 --- /dev/null +++ b/docs/releases/pending/3077-setup-node-v7.md.md @@ -0,0 +1,3 @@ +## chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0 + +Dependabot bump of the `actions/setup-node` workflow action from v5.0.0 to v7.0.0 (pinned by SHA) in the CI and release-and-publish workflows. Maintainer-facing CI-only change; the node-version and cache inputs used by this repo are compatible. From 0729ce4cef6125590926f2891d08ecaaf2600ae0 Mon Sep 17 00:00:00 2001 From: Test User Date: Tue, 6 Oct 2026 06:04:24 -0500 Subject: [PATCH 3/7] chore(deps): fix fragment filename double extension --- .../pending/{3077-setup-node-v7.md.md => 3077-setup-node-v7.md} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename docs/releases/pending/{3077-setup-node-v7.md.md => 3077-setup-node-v7.md} (100%) diff --git a/docs/releases/pending/3077-setup-node-v7.md.md b/docs/releases/pending/3077-setup-node-v7.md similarity index 100% rename from docs/releases/pending/3077-setup-node-v7.md.md rename to docs/releases/pending/3077-setup-node-v7.md From df6fe3697b43eb2aa9732cb3a6541e541b04b12e Mon Sep 17 00:00:00 2001 From: Test User Date: Tue, 6 Oct 2026 06:20:17 -0500 Subject: [PATCH 4/7] chore(ci): refresh local workflow hashes in required-check evidence --- docs/ci/required-check-evidence.json | 26 ++++++++++++++++++++------ 1 file changed, 20 insertions(+), 6 deletions(-) diff --git a/docs/ci/required-check-evidence.json b/docs/ci/required-check-evidence.json index f5709a779..3a0addd99 100644 --- a/docs/ci/required-check-evidence.json +++ b/docs/ci/required-check-evidence.json @@ -72,15 +72,29 @@ } ], "workflowRunsByWorkflow": { - ".github/workflows/ci.yml": [34639685905], - ".github/workflows/pr-standards.yml": [34639685670], + ".github/workflows/ci.yml": [ + 34639685905 + ], + ".github/workflows/pr-standards.yml": [ + 34639685670 + ], ".github/workflows/drift-check.yml": [] } }, "workflowEvents": { - ".github/workflows/ci.yml": ["pull_request", "merge_group"], - ".github/workflows/pr-standards.yml": ["pull_request", "merge_group"], - ".github/workflows/drift-check.yml": ["workflow_dispatch", "pull_request", "push"] + ".github/workflows/ci.yml": [ + "pull_request", + "merge_group" + ], + ".github/workflows/pr-standards.yml": [ + "pull_request", + "merge_group" + ], + ".github/workflows/drift-check.yml": [ + "workflow_dispatch", + "pull_request", + "push" + ] }, "capturedWorkflowFiles": { ".github/workflows/ci.yml": { @@ -97,7 +111,7 @@ } }, "localWorkflowHashes": { - ".github/workflows/ci.yml": "2fc14fe568d147c7fd4dc73c4dd88c13d95c18ba70bbf97ce1f51a732d335d67", + ".github/workflows/ci.yml": "48e18c25ebdf9bae86fde51655e9a314fa8652474f973f52af0fc653b70bfd1c", ".github/workflows/pr-standards.yml": "e055a61a1d43c2c3c74f6b263b21fc4c8f80b62cc34669be59163cb7e492b5a1", ".github/workflows/drift-check.yml": "4aaea9479278257aa715f1140bf24e0f92ef2cf9fe2a2b6873fb65fa6442ea78" }, From 19a05061c55b6c3860137ffbecee73b48cfaa91d Mon Sep 17 00:00:00 2001 From: Test User Date: Tue, 6 Oct 2026 16:31:33 -0500 Subject: [PATCH 5/7] fix(ci): rebuild required-check evidence from main and refresh local workflow hashes --- docs/ci/required-check-evidence.json | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/docs/ci/required-check-evidence.json b/docs/ci/required-check-evidence.json index 0c8d3ffbd..928f0ce53 100644 --- a/docs/ci/required-check-evidence.json +++ b/docs/ci/required-check-evidence.json @@ -111,11 +111,7 @@ } }, "localWorkflowHashes": { -<<<<<<< HEAD - ".github/workflows/ci.yml": "48e18c25ebdf9bae86fde51655e9a314fa8652474f973f52af0fc653b70bfd1c", -======= - ".github/workflows/ci.yml": "c0aa1321834f368fa73f1e8ea26b661347caf603c6915b719b0f8848cb69af77", ->>>>>>> origin/main + ".github/workflows/ci.yml": "9e29298b2f519bd1de34c89ca03f6a22aa9023339e80fa92d0e9639bd7e44b8b", ".github/workflows/pr-standards.yml": "e055a61a1d43c2c3c74f6b263b21fc4c8f80b62cc34669be59163cb7e492b5a1", ".github/workflows/drift-check.yml": "b1ce25c5790245daab68b389812caf9b5588a4b5c9524a7b942c5690193bfa81" }, From 122f234bb013b8beeb441e82ba26870a4882ebea Mon Sep 17 00:00:00 2001 From: Test User Date: Tue, 6 Oct 2026 19:41:32 -0500 Subject: [PATCH 6/7] fix(ci): hash merged workflow tree in required-check evidence --- docs/ci/required-check-evidence.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/ci/required-check-evidence.json b/docs/ci/required-check-evidence.json index 928f0ce53..be479de85 100644 --- a/docs/ci/required-check-evidence.json +++ b/docs/ci/required-check-evidence.json @@ -111,9 +111,9 @@ } }, "localWorkflowHashes": { - ".github/workflows/ci.yml": "9e29298b2f519bd1de34c89ca03f6a22aa9023339e80fa92d0e9639bd7e44b8b", + ".github/workflows/ci.yml": "c543b7f3e5f59da826211da4e2533898a5bcac1e5f747a5f3ec2895b0bad521a", ".github/workflows/pr-standards.yml": "e055a61a1d43c2c3c74f6b263b21fc4c8f80b62cc34669be59163cb7e492b5a1", - ".github/workflows/drift-check.yml": "b1ce25c5790245daab68b389812caf9b5588a4b5c9524a7b942c5690193bfa81" + ".github/workflows/drift-check.yml": "669a98a3c1d1ec5b5869bbd73142de5a5795f17877ab604f4ef680bc81f54cb6" }, "capturedAt": "2026-09-11T21:30:25Z", "captureSha": "b21cdce17b8731143ed5fab7fdf32dd8ad5f7a7f", From d89fb28bbd7b003f2b8623324be1202cdbb84b30 Mon Sep 17 00:00:00 2001 From: Test User Date: Tue, 6 Oct 2026 20:24:35 -0500 Subject: [PATCH 7/7] chore(ci): re-trigger workflows after dropped push event