chore(deps): bump actions/setup-node from 4 to 7

[dependabot]

Description

Updates actions/setup-node from v4 to v7 in the pull-request review, test, and type-check workflows.

Type of Change

• Dependency maintenance
• Bug fix
• New feature
• Breaking change

How Has This Been Tested?

• The updated action set up Node.js 24.17.0 and the pnpm cache in this pull request.
• Run tests passed with 21 tests.
• Typecheck passed.
• MegaLinter passed.

Checklist

• My code follows the style guidelines of this project
• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• Any dependent changes have been merged and published in downstream modules
• I have checked my code and corrected any misspellings

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
website-3g7t	Ready	Preview	Aug 26, 2026 7:40pm

[github-actions]

	Messages
📖	Thanks! We ❤️ small PRs!

Generated by 🚫 dangerJS against a3dc8ec

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	5		0	0	0.05s
✅ BASH	bash-exec	1		0	0	0.0s
✅ BASH	shellcheck	1		0	0	0.1s
⚠️ BASH	shfmt	1		1	0	0.0s
✅ COPYPASTE	jscpd	yes		no	no	2.32s
✅ EDITORCONFIG	editorconfig-checker	176		0	0	0.3s
✅ JAVASCRIPT	standard	1		0	0	0.77s
✅ JSON	jsonlint	10		0	0	0.09s
✅ JSON	npm-package-json-lint	yes		no	no	0.53s
✅ JSON	prettier	10		0	0	0.41s
✅ JSON	v8r	10		0	0	10.63s
✅ MARKDOWN	markdownlint	10		0	0	0.54s
⚠️ MARKDOWN	markdown-table-formatter	10		1	0	0.21s
✅ REPOSITORY	checkov	yes		no	no	16.83s
✅ REPOSITORY	gitleaks	yes		no	no	0.59s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	secretlint	yes		no	no	1.03s
✅ REPOSITORY	trivy	yes		no	no	7.47s
✅ REPOSITORY	trufflehog	yes		no	no	2.17s
✅ SPELL	cspell	177		0	0	3.13s
✅ YAML	prettier	13		0	0	0.41s
✅ YAML	yamllint	13		0	0	0.72s

See detailed report in MegaLinter reports

[ulises-jeremias]

Triage 2026-08-25 (maintenance sweep): BLOCKED — not safe to merge.

All 8 open dependabot PRs fail the same MegaLinter gate as main (32756066890):

• cspell 46 errors (vmodules/vweb/… Spanish i18n, pnpm-lock) — needs combined .cspell.json allowlist PR
• trivy HIGH vuln on pnpm-lock.yaml (brace-expansion CVE-2026-14257/69152, sharp→libvips) + tools/danger/package-lock.json undici CVE-2026-13697 — needs lockfile bump (none of these 8 PRs fixes all 3)
• editorconfig-checker on public/install.sh / non-blocking markdown-table-formatter & yaml prettier
• Danger / pr-review also failing (ts.transpileModule in danger bundle)

test/type-check/Vercel are green, so this is not a code regression from the dep bump. Keep open; do not merge until a combined cspell+trivy+editorconfig fix lands on main, then rebase these dependabots. One-per-lockfile-dir rule applies — batch by / vs /tools/danger.

Post-merge gate on main: tests ✅, type-check ✅, todo ✅, dynamic dependabot updates ✅, MegaLinter ❌ (same 3 linters). No merge attempted.