matrix-art.meta

245.json (9586B)

---

 {
   "number": 245,
   "title": "Bump actions/setup-node from 3.2.0 to 3.5.1",
   "state": "closed",
   "diff_file": "245.diff",
   "author": "dependabot[bot]",
   "created_at": "2023-01-03T16:43:10Z",
   "closed_at": "2023-01-03T16:43:36Z",
   "merged_at": null,
   "base_ref": "main",
   "head_ref": "dependabot/github_actions/actions/setup-node-3.5.1",
   "labels": [
     "dependencies",
     "github_actions"
   ],
   "assignees": [
     "MTRNord"
   ],
   "requested_reviewers": [
     "MTRNord"
   ],
   "body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3.2.0 to 3.5.1.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/actions/setup-node/releases\">actions/setup-node's releases</a>.</em></p>\n<blockquote>\n<h2>Update <code>@\u200bactions/core</code> and Print Node, Npm, Yarn versions</h2>\n<p>In scope of this release we updated <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/587\">actions/core to 1.10.0</a>. Moreover, we added logic <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/368\">to print Nodejs, Npm, Yarn versions</a> after installation.</p>\n<h2>Add support for engines.node and Volta</h2>\n<p>In scope of this release we add support for engines.node. The action will be able to grab the version form package.json#engines.node. <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/485\">actions/setup-node#485</a>. Moreover, we <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/532\">added support for Volta</a></p>\n<p>Besides, we updated <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/574\"><code>@\u200bactions/core</code> to 1.9.1</a> and <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/573\"><code>@\u200bactions/cache</code> to 3.0.4</a></p>\n<h2>Fix pnpm output and node-version  output issues</h2>\n<p>In scope of this release we fixed bugs related to the pnpm 7.5.1 output issue from <code>pnpm store path</code> <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/545\">actions/setup-node#545</a>. Moreover we fixed the issue with falling on node-version output <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/540\">actions/setup-node#540</a>.</p>\n<h2>Add support for asdf format and update actions/cache version to 3.0.0</h2>\n<p>In scope of this release we updated <code>actions/cache</code> package as the new version contains fixes for <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/526\">caching error handling</a>. Moreover, we added support for asdf format as Node.js version file <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/373\">actions/setup-node#373</a>. Besides, we introduced new output <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/534\">node-version</a> and added <code>npm-shrinkwrap.json</code> to dependency file patterns: <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/439\">actions/setup-node#439</a></p>\n<h2>Add support for lts/-n aliases</h2>\n<p>In scope of this release we added support for <code>lts/-n</code> aliases, improve logic for <code>current</code>, <code>latest</code> and <code>node</code> aliases to handle them from <code>toolcache</code>, update <code>ncc</code> package.</p>\n<h3>Support of lts/-n aliases</h3>\n<ul>\n<li>Related pull request: <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/481\">actions/setup-node#481</a></li>\n<li>Related issue: <a href=\"https://github-redirect.dependabot.com/actions/setup-node/issues/26\">actions/setup-node#26</a></li>\n</ul>\n<pre lang=\"yaml\"><code>steps:\n- uses: actions/checkout@v3\n- uses: actions/setup-node@v3\n  with:\n    node-version: lts/-1\n- run: npm ci\n- run: npm test\n</code></pre>\n<h3>Minor improvements</h3>\n<ul>\n<li>Update zeit/ncc to vercel/ncc: <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/476\">actions/setup-node#476</a></li>\n<li>Get latest version from cache if exists: <a href=\"https://github-redirect.dependabot.com/actions/setup-node/pull/496\">actions/setup-node#496</a></li>\n</ul>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/actions/setup-node/commit/8c91899e586c5b171469028077307d293428b516\"><code>8c91899</code></a> Update <code>@\u200bactions/core</code> to 1.10.0 (<a href=\"https://github-redirect.dependabot.com/actions/setup-node/issues/587\">#587</a>)</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/c81d8ad96dab0a834a87f7a0300b154386f2e26a\"><code>c81d8ad</code></a> Print node, npm and yarn versions after installation (<a href=\"https://github-redirect.dependabot.com/actions/setup-node/issues/368\">#368</a>)</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/c96ab56c5b0ebc955a5dd6bb6f1813c2f91b8658\"><code>c96ab56</code></a> Add information about always-auth input (<a href=\"https://github-redirect.dependabot.com/actions/setup-node/issues/585\">#585</a>)</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/969bd2663942d722d85b6a8626225850c2f7be4b\"><code>969bd26</code></a> Fix test volta priority (<a href=\"https://github-redirect.dependabot.com/actions/setup-node/issues/577\">#577</a>)</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/9f3a02bbd17adc05b078145bb8f676c84be77e89\"><code>9f3a02b</code></a> Merge pull request <a href=\"https://github-redirect.dependabot.com/actions/setup-node/issues/532\">#532</a> from jef/main</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/4cffe5c52b4c7a58d230a4f51f534a7bf0f1dfce\"><code>4cffe5c</code></a> chore: remove sponge usage</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/0efefb3c0b635aa27a368ae8b1eb60345072b977\"><code>0efefb3</code></a> Merge remote-tracking branch 'upstream/main'</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/1e6f2cd3121764f4065a4f231bbc7222d7ffc0a4\"><code>1e6f2cd</code></a> test: add volta e2e test</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/30f0e7dc5aa0e546410a28dc80a10d8114ee873e\"><code>30f0e7d</code></a> Update <code>@\u200bactions/core</code> to 1.9.1 (<a href=\"https://github-redirect.dependabot.com/actions/setup-node/issues/574\">#574</a>)</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/c8f0d105851628358c640b5e1ba0feb8990cab50\"><code>c8f0d10</code></a> upgrade <code>@action/cache</code> to 3.0.4 to fix stuck issue (<a href=\"https://github-redirect.dependabot.com/actions/setup-node/issues/573\">#573</a>)</li>\n<li>Additional commits viewable in <a href=\"https://github.com/actions/setup-node/compare/17f8bd926464a1afa4c6a11669539e9c1ba77048...8c91899e586c5b171469028077307d293428b516\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-node&package-manager=github_actions&previous-version=3.2.0&new-version=3.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n</details>",
   "comments": [
     {
       "author": "dependabot[bot]",
       "created_at": "2023-01-03T16:43:38Z",
       "body": "OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file.\n\nIf you change your mind, just re-open this PR and I'll resolve any conflicts on it."
     }
   ],
   "review_comments": []
 }