[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout	action	major	v6.1.0 → v7.0.1
actions/setup-node	action	major	v6.5.0 → v7.1.0
cycjimmy/semantic-release-action	action	major	v6.0.0 → v7.1.2	v8.1.3 (+6)

---

Release Notes

actions/checkout

v7.0.1

Compare Source

• Skip running unsafe pr check if input is default by @​aiqiaoy in #​2518
• Trim only ascii whitespace for branch by @​aiqiaoy in #​2521
• Escape values passed to --unset by @​aiqiaoy in #​2530
• Various dependency updates

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Various dependency updates

actions/setup-node

v7.1.0

Compare Source

What's Changed

Enhancements:

• Add support for mise.toml file by @​gperdomor in #​1421
• Support absolute paths in node-version-file by @​v-mahabaleshwars in #​1633

Bug fixes:

• Add Node version validation and manifest fetch retry by @​v-jitenderpalsingh in #​1580

Documentation updates:

• README.md: bump actions/checkout to latest version 7 by @​deining in #​1578
• docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @​v-gowridurgad in #​1593
• Fixed cache recommendation syntax by @​SubJunk in #​1603

Dependency updates:

• Update workflow pins and migrate Node matrices to modern versions by @​v-HarithaVattikuti in #​1583
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in #​1584
• Pin @​types/node to v24 by @​v-priyagupta108 in #​1585
• Override brace-expansion to 5.0.8 by @​v-priyagupta108 with @​Copilot in #​1599
• Upgrade actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in #​1598
• Upgrade prettier from 3.8.4 to 3.9.6 by @​dependabot in #​1590
• Upgrade @​vercel/ncc from 0.44.0 to 0.45.0 by @​dependabot in #​1610
• Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @​dependabot in #​1602
• Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @​dependabot in #​1629
• Upgrade @​types/semver from 7.7.1 to 7.8.0 by @​dependabot in #​1616
• Upgrade @​typescript-eslint/parser from 8.62.0 to 8.70.0 by @​dependabot in #​1615
• Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @​dependabot in #​1631
• Upgrade jest-each from 30.4.1 to 30.5.2 by @​dependabot in #​1636
• Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @​dependabot in #​1638
• Update dependencies and add license files by @​v-HarithaVattikuti in #​1642
• Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @​dependabot in #​1635

New Contributors

• @​v-jitenderpalsingh made their first contribution in #​1580
• @​philip-gai made their first contribution in #​1584
• @​gperdomor made their first contribution in #​1421
• @​SubJunk made their first contribution in #​1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

v7.0.0

Compare Source

What's Changed

Enhancements:

• Add cache-primary-key and cache-matched-key as outputs by @​gowridurgad in #​1577
• Migrate to ESM and upgrade dependencies by @​gowridurgad in #​1574

Bug fixes:

• Remove dummy NODE_AUTH_TOKEN export by @​gowridurgad in #​1558
• Only use mirrorToken in getManifest if it's provided by @​deiga in #​1548

Documentation updates:

• Add documentation for publishing to npm with Trusted Publisher (OIDC) by @​chiranjib-swain in #​1536
• docs: Update restore-only cache documentation by @​priya-kinthali in #​1550
• docs: Update caching recommendations to mitigate cache poisoning risks by @​chiranjib-swain in #​1567

Dependency update:

• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in #​1569

New Contributors

• @​chiranjib-swain made their first contribution in #​1536
• @​deiga made their first contribution in #​1548
• @​jasongin made their first contribution in #​1569

Full Changelog: actions/setup-node@v6...v7.0.0

cycjimmy/semantic-release-action

v7.1.2

Compare Source

Bug Fixes

• install: improve npm install logging for error visibility (3f9efbb)

v7.1.1

Compare Source

Bug Fixes

• ci: improve error handling for push permission failures (895d556), closes #​312

v7.1.0

Compare Source

Features

• core: add option to skip npm plugin for non-Node.js projects (d1038bc), closes #​313

v7.0.0

Compare Source

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • Monday through Friday (* * * * 1-5)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.