245.md (9212B)
1 # PR #245 Bump actions/setup-node from 3.2.0 to 3.5.1 2 3 - **Status:** closed 4 - **Author:** @dependabot[bot] 5 - **Created:** 2023-01-03T16:43:10Z 6 - **Branch:** dependabot/github_actions/actions/setup-node-3.5.1 → main 7 - **Closed:** 2023-01-03T16:43:36Z 8 - **Labels:** dependencies, github_actions 9 - **Assignees:** @MTRNord 10 - **Reviewers:** @MTRNord 11 - **Diff:** [245.diff](./245.diff) 12 13 --- 14 15 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3.2.0 to 3.5.1. 16 <details> 17 <summary>Release notes</summary> 18 <p><em>Sourced from <a href="https://github.com/actions/setup-node/releases">actions/setup-node's releases</a>.</em></p> 19 <blockquote> 20 <h2>Update <code>@actions/core</code> and Print Node, Npm, Yarn versions</h2> 21 <p>In scope of this release we updated <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/587">actions/core to 1.10.0</a>. Moreover, we added logic <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/368">to print Nodejs, Npm, Yarn versions</a> after installation.</p> 22 <h2>Add support for engines.node and Volta</h2> 23 <p>In scope of this release we add support for engines.node. The action will be able to grab the version form package.json#engines.node. <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/485">actions/setup-node#485</a>. Moreover, we <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/532">added support for Volta</a></p> 24 <p>Besides, we updated <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/574"><code>@actions/core</code> to 1.9.1</a> and <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/573"><code>@actions/cache</code> to 3.0.4</a></p> 25 <h2>Fix pnpm output and node-version output issues</h2> 26 <p>In scope of this release we fixed bugs related to the pnpm 7.5.1 output issue from <code>pnpm store path</code> <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/545">actions/setup-node#545</a>. Moreover we fixed the issue with falling on node-version output <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/540">actions/setup-node#540</a>.</p> 27 <h2>Add support for asdf format and update actions/cache version to 3.0.0</h2> 28 <p>In scope of this release we updated <code>actions/cache</code> package as the new version contains fixes for <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/526">caching error handling</a>. Moreover, we added support for asdf format as Node.js version file <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/373">actions/setup-node#373</a>. Besides, we introduced new output <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/534">node-version</a> and added <code>npm-shrinkwrap.json</code> to dependency file patterns: <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/439">actions/setup-node#439</a></p> 29 <h2>Add support for lts/-n aliases</h2> 30 <p>In scope of this release we added support for <code>lts/-n</code> aliases, improve logic for <code>current</code>, <code>latest</code> and <code>node</code> aliases to handle them from <code>toolcache</code>, update <code>ncc</code> package.</p> 31 <h3>Support of lts/-n aliases</h3> 32 <ul> 33 <li>Related pull request: <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/481">actions/setup-node#481</a></li> 34 <li>Related issue: <a href="https://github-redirect.dependabot.com/actions/setup-node/issues/26">actions/setup-node#26</a></li> 35 </ul> 36 <pre lang="yaml"><code>steps: 37 - uses: actions/checkout@v3 38 - uses: actions/setup-node@v3 39 with: 40 node-version: lts/-1 41 - run: npm ci 42 - run: npm test 43 </code></pre> 44 <h3>Minor improvements</h3> 45 <ul> 46 <li>Update zeit/ncc to vercel/ncc: <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/476">actions/setup-node#476</a></li> 47 <li>Get latest version from cache if exists: <a href="https://github-redirect.dependabot.com/actions/setup-node/pull/496">actions/setup-node#496</a></li> 48 </ul> 49 </blockquote> 50 </details> 51 <details> 52 <summary>Commits</summary> 53 <ul> 54 <li><a href="https://github.com/actions/setup-node/commit/8c91899e586c5b171469028077307d293428b516"><code>8c91899</code></a> Update <code>@actions/core</code> to 1.10.0 (<a href="https://github-redirect.dependabot.com/actions/setup-node/issues/587">#587</a>)</li> 55 <li><a href="https://github.com/actions/setup-node/commit/c81d8ad96dab0a834a87f7a0300b154386f2e26a"><code>c81d8ad</code></a> Print node, npm and yarn versions after installation (<a href="https://github-redirect.dependabot.com/actions/setup-node/issues/368">#368</a>)</li> 56 <li><a href="https://github.com/actions/setup-node/commit/c96ab56c5b0ebc955a5dd6bb6f1813c2f91b8658"><code>c96ab56</code></a> Add information about always-auth input (<a href="https://github-redirect.dependabot.com/actions/setup-node/issues/585">#585</a>)</li> 57 <li><a href="https://github.com/actions/setup-node/commit/969bd2663942d722d85b6a8626225850c2f7be4b"><code>969bd26</code></a> Fix test volta priority (<a href="https://github-redirect.dependabot.com/actions/setup-node/issues/577">#577</a>)</li> 58 <li><a href="https://github.com/actions/setup-node/commit/9f3a02bbd17adc05b078145bb8f676c84be77e89"><code>9f3a02b</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/actions/setup-node/issues/532">#532</a> from jef/main</li> 59 <li><a href="https://github.com/actions/setup-node/commit/4cffe5c52b4c7a58d230a4f51f534a7bf0f1dfce"><code>4cffe5c</code></a> chore: remove sponge usage</li> 60 <li><a href="https://github.com/actions/setup-node/commit/0efefb3c0b635aa27a368ae8b1eb60345072b977"><code>0efefb3</code></a> Merge remote-tracking branch 'upstream/main'</li> 61 <li><a href="https://github.com/actions/setup-node/commit/1e6f2cd3121764f4065a4f231bbc7222d7ffc0a4"><code>1e6f2cd</code></a> test: add volta e2e test</li> 62 <li><a href="https://github.com/actions/setup-node/commit/30f0e7dc5aa0e546410a28dc80a10d8114ee873e"><code>30f0e7d</code></a> Update <code>@actions/core</code> to 1.9.1 (<a href="https://github-redirect.dependabot.com/actions/setup-node/issues/574">#574</a>)</li> 63 <li><a href="https://github.com/actions/setup-node/commit/c8f0d105851628358c640b5e1ba0feb8990cab50"><code>c8f0d10</code></a> upgrade <code>@action/cache</code> to 3.0.4 to fix stuck issue (<a href="https://github-redirect.dependabot.com/actions/setup-node/issues/573">#573</a>)</li> 64 <li>Additional commits viewable in <a href="https://github.com/actions/setup-node/compare/17f8bd926464a1afa4c6a11669539e9c1ba77048...8c91899e586c5b171469028077307d293428b516">compare view</a></li> 65 </ul> 66 </details> 67 <br /> 68 69 70 [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) 71 72 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. 73 74 [//]: # (dependabot-automerge-start) 75 [//]: # (dependabot-automerge-end) 76 77 --- 78 79 <details> 80 <summary>Dependabot commands and options</summary> 81 <br /> 82 83 You can trigger Dependabot actions by commenting on this PR: 84 - `@dependabot rebase` will rebase this PR 85 - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it 86 - `@dependabot merge` will merge this PR after your CI passes on it 87 - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it 88 - `@dependabot cancel merge` will cancel a previously requested merge and block automerging 89 - `@dependabot reopen` will reopen this PR if it is closed 90 - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually 91 - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) 92 - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) 93 - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) 94 95 96 </details> 97 98 99 ## Comments 100 101 ### @dependabot[bot] — 2023-01-03T16:43:38Z 102 103 OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file. 104 105 If you change your mind, just re-open this PR and I'll resolve any conflicts on it. 106