105.json (11015B)
1 { 2 "number": 105, 3 "title": "Bump actions/setup-node from 3.8.1 to 4.1.0", 4 "state": "merged", 5 "diff_file": "105.diff", 6 "author": "dependabot[bot]", 7 "created_at": "2024-12-29T13:43:11Z", 8 "closed_at": "2024-12-29T14:10:53Z", 9 "merged_at": "2024-12-29T14:10:53Z", 10 "base_ref": "main", 11 "head_ref": "dependabot/github_actions/actions/setup-node-4.1.0", 12 "labels": [ 13 "dependencies", 14 "github_actions" 15 ], 16 "assignees": [], 17 "requested_reviewers": [], 18 "body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3.8.1 to 4.1.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/actions/setup-node/releases\">actions/setup-node's releases</a>.</em></p>\n<blockquote>\n<h2>v4.1.0</h2>\n<h2>What's Changed</h2>\n<ul>\n<li>Resolve High Security Alerts by upgrading Dependencies by <a href=\"https://github.com/aparnajyothi-y\"><code>@\u200baparnajyothi-y</code></a> in <a href=\"https://redirect.github.com/actions/setup-node/pull/1132\">actions/setup-node#1132</a></li>\n<li>Upgrade IA Publish by <a href=\"https://github.com/Jcambass\"><code>@\u200bJcambass</code></a> in <a href=\"https://redirect.github.com/actions/setup-node/pull/1134\">actions/setup-node#1134</a></li>\n<li>Revise <code>isGhes</code> logic by <a href=\"https://github.com/jww3\"><code>@\u200bjww3</code></a> in <a href=\"https://redirect.github.com/actions/setup-node/pull/1148\">actions/setup-node#1148</a></li>\n<li>Add architecture to cache key by <a href=\"https://github.com/pengx17\"><code>@\u200bpengx17</code></a> in <a href=\"https://redirect.github.com/actions/setup-node/pull/843\">actions/setup-node#843</a>\nThis addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.\nNote: This change may break previous cache keys as they will no longer be compatible with the new format.</li>\n</ul>\n<h2>New Contributors</h2>\n<ul>\n<li><a href=\"https://github.com/jww3\"><code>@\u200bjww3</code></a> made their first contribution in <a href=\"https://redirect.github.com/actions/setup-node/pull/1148\">actions/setup-node#1148</a></li>\n<li><a href=\"https://github.com/pengx17\"><code>@\u200bpengx17</code></a> made their first contribution in <a href=\"https://redirect.github.com/actions/setup-node/pull/843\">actions/setup-node#843</a></li>\n</ul>\n<p><strong>Full Changelog</strong>: <a href=\"https://github.com/actions/setup-node/compare/v4...v4.1.0\">https://github.com/actions/setup-node/compare/v4...v4.1.0</a></p>\n<h2>v4.0.4</h2>\n<h2>What's Changed</h2>\n<ul>\n<li>Add workflow file for publishing releases to immutable action package by <a href=\"https://github.com/Jcambass\"><code>@\u200bJcambass</code></a> in <a href=\"https://redirect.github.com/actions/setup-node/pull/1125\">actions/setup-node#1125</a></li>\n<li>Enhance Windows ARM64 Setup and Update micromatch Dependency by <a href=\"https://github.com/priyagupta108\"><code>@\u200bpriyagupta108</code></a> in <a href=\"https://redirect.github.com/actions/setup-node/pull/1126\">actions/setup-node#1126</a></li>\n</ul>\n<h3>Documentation changes:</h3>\n<ul>\n<li>Documentation update in the README file by <a href=\"https://github.com/suyashgaonkar\"><code>@\u200bsuyashgaonkar</code></a> in <a href=\"https://redirect.github.com/actions/setup-node/pull/1106\">actions/setup-node#1106</a></li>\n<li>Correct invalid 'lts' version string reference by <a href=\"https://github.com/fulldecent\"><code>@\u200bfulldecent</code></a> in <a href=\"https://redirect.github.com/actions/setup-node/pull/1124\">actions/setup-node#1124</a></li>\n</ul>\n<h2>New Contributors</h2>\n<ul>\n<li><a href=\"https://github.com/suyashgaonkar\"><code>@\u200bsuyashgaonkar</code></a> made their first contribution in <a href=\"https://redirect.github.com/actions/setup-node/pull/1106\">actions/setup-node#1106</a></li>\n<li><a href=\"https://github.com/priyagupta108\"><code>@\u200bpriyagupta108</code></a> made their first contribution in <a href=\"https://redirect.github.com/actions/setup-node/pull/1126\">actions/setup-node#1126</a></li>\n<li><a href=\"https://github.com/Jcambass\"><code>@\u200bJcambass</code></a> made their first contribution in <a href=\"https://redirect.github.com/actions/setup-node/pull/1125\">actions/setup-node#1125</a></li>\n<li><a href=\"https://github.com/fulldecent\"><code>@\u200bfulldecent</code></a> made their first contribution in <a href=\"https://redirect.github.com/actions/setup-node/pull/1124\">actions/setup-node#1124</a></li>\n</ul>\n<p><strong>Full Changelog</strong>: <a href=\"https://github.com/actions/setup-node/compare/v4...v4.0.4\">https://github.com/actions/setup-node/compare/v4...v4.0.4</a></p>\n<h2>v4.0.3</h2>\n<h2>What's Changed</h2>\n<h3>Bug fixes:</h3>\n<ul>\n<li>Fix macos latest check failures by <a href=\"https://github.com/HarithaVattikuti\"><code>@\u200bHarithaVattikuti</code></a> in <a href=\"https://redirect.github.com/actions/setup-node/pull/1041\">actions/setup-node#1041</a></li>\n</ul>\n<h3>Documentation changes:</h3>\n<ul>\n<li>Documentation update to update default Node version to 20 by <a href=\"https://github.com/bengreeley\"><code>@\u200bbengreeley</code></a> in <a href=\"https://redirect.github.com/actions/setup-node/pull/949\">actions/setup-node#949</a></li>\n</ul>\n<h3>Dependency updates:</h3>\n<ul>\n<li>Bump undici from 5.26.5 to 5.28.3 by <a href=\"https://github.com/dependabot\"><code>@\u200bdependabot</code></a> in <a href=\"https://redirect.github.com/actions/setup-node/pull/965\">actions/setup-node#965</a></li>\n<li>Bump braces from 3.0.2 to 3.0.3 and other dependency updates by <a href=\"https://github.com/dependabot\"><code>@\u200bdependabot</code></a> in <a href=\"https://redirect.github.com/actions/setup-node/pull/1087\">actions/setup-node#1087</a></li>\n</ul>\n<h2>New Contributors</h2>\n<ul>\n<li><a href=\"https://github.com/bengreeley\"><code>@\u200bbengreeley</code></a> made their first contribution in <a href=\"https://redirect.github.com/actions/setup-node/pull/949\">actions/setup-node#949</a></li>\n<li><a href=\"https://github.com/HarithaVattikuti\"><code>@\u200bHarithaVattikuti</code></a> made their first contribution in <a href=\"https://redirect.github.com/actions/setup-node/pull/1041\">actions/setup-node#1041</a></li>\n</ul>\n<!-- raw HTML omitted -->\n</blockquote>\n<p>... (truncated)</p>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/actions/setup-node/commit/39370e3970a6d050c480ffad4ff0ed4d3fdee5af\"><code>39370e3</code></a> fix: add arch to cached path (<a href=\"https://redirect.github.com/actions/setup-node/issues/843\">#843</a>)</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/abb238b1313d8ef4d3e3a96d204e08329cafbf85\"><code>abb238b</code></a> Revise <code>isGhes</code> logic (<a href=\"https://redirect.github.com/actions/setup-node/issues/1148\">#1148</a>)</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/aca7b64a59c0063db8564e0ffdadd3887f1cbae5\"><code>aca7b64</code></a> Merge pull request <a href=\"https://redirect.github.com/actions/setup-node/issues/1134\">#1134</a> from actions/Jcambass-patch-1</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/88de2a3d99c13aa734c49200e8bc673fb0a80ab8\"><code>88de2a3</code></a> Resolve High Security Alerts by upgrading Dependencies (<a href=\"https://redirect.github.com/actions/setup-node/issues/1132\">#1132</a>)</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/0a44ba7841725637a19e28fa30b79a866c81b0a6\"><code>0a44ba7</code></a> Correct version string (<a href=\"https://redirect.github.com/actions/setup-node/issues/1124\">#1124</a>)</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/d6ebc7b438e9cf1b22a3c440a164b179ed0e37d6\"><code>d6ebc7b</code></a> Upgrade IA Publish</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/97ca147735c170fb35096b39ef17a0fc5d9270ac\"><code>97ca147</code></a> Merge pull request <a href=\"https://redirect.github.com/actions/setup-node/issues/1125\">#1125</a> from actions/add-is-release-workflow</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/aa363ded8fefb1e43b7a6cb669a222a98c09eb57\"><code>aa363de</code></a> Create publish-immutable-action.yml</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/1c7b2db92075f828bee89d7e19d33a911d15e7b3\"><code>1c7b2db</code></a> Fix: windows arm64 setup (<a href=\"https://redirect.github.com/actions/setup-node/issues/1126\">#1126</a>)</li>\n<li><a href=\"https://github.com/actions/setup-node/commit/26961cf329f22f6837d5f54c3efd76b480300ace\"><code>26961cf</code></a> Documentation update in the README file (<a href=\"https://redirect.github.com/actions/setup-node/issues/1106\">#1106</a>)</li>\n<li>Additional commits viewable in <a href=\"https://github.com/actions/setup-node/compare/v3.8.1...v4.1.0\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n</details>", 19 "comments": [], 20 "review_comments": [] 21 }