Skip to content

chore(deps): update actions/setup-node action to v6#316

Open
red-hat-konflux[bot] wants to merge 1 commit intomasterfrom
konflux/mintmaker/master/actions-setup-node-6.x
Open

chore(deps): update actions/setup-node action to v6#316
red-hat-konflux[bot] wants to merge 1 commit intomasterfrom
konflux/mintmaker/master/actions-setup-node-6.x

Conversation

@red-hat-konflux
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/setup-node action major v4v6

Release Notes

actions/setup-node (actions/setup-node)

v6

Compare Source

v5

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 8, 2026

Summary by CodeRabbit

  • Chores
    • Updated GitHub Actions workflow to use the latest version of the Node.js setup action, improving CI/CD pipeline reliability and compatibility.

Walkthrough

Updated GitHub Actions workflow to upgrade the Node setup action from v4 to v6 across the install, test-component, and test-storybook jobs. Node version and npm caching configuration unchanged.

Changes

Cohort / File(s) Summary
GitHub Actions Workflow
.github/workflows/test.yml
Updated actions/setup-node version from v4 to v6 in three jobs (install, test-component, test-storybook).

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The description is missing required sections from the template including a summary of changes, reasoning, and the checklist, though it includes Renovate-generated dependency update details. Add a Description section with 2-3 sentences explaining what changed and why, and complete the Checklist section to confirm testing and code review standards.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and concisely describes the main change: updating actions/setup-node to v6, which matches the workflow changes in the PR.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch konflux/mintmaker/master/actions-setup-node-6.x

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick comments (1)
.github/workflows/test.yml (1)

17-17: ⚡ Quick win

Pin actions/setup-node and actions/checkout to immutable commit SHAs instead of floating major version tags.

Using @v6 and @v4 tags is convenient, but pinning to full commit SHAs improves supply-chain integrity and reproducibility.

This applies to lines: 17, 43, 84 (for actions/setup-node@v6) and lines 15, 41, 82 (for actions/checkout@v4).

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/workflows/test.yml at line 17, Replace the floating tags
"actions/setup-node@v6" and "actions/checkout@v4" with pinned immutable commit
SHAs for each occurrence in the workflow; locate the `uses:` entries (the
occurrences of actions/setup-node and actions/checkout) and change them to the
full commit SHA form (e.g., actions/setup-node@<commit-sha> and
actions/checkout@<commit-sha>) by looking up the corresponding repository commit
hash on GitHub and updating lines where `uses: actions/setup-node@v6` and `uses:
actions/checkout@v4` appear so each of the three occurrences is pinned.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In @.github/workflows/test.yml:
- Line 17: Replace the floating tags "actions/setup-node@v6" and
"actions/checkout@v4" with pinned immutable commit SHAs for each occurrence in
the workflow; locate the `uses:` entries (the occurrences of actions/setup-node
and actions/checkout) and change them to the full commit SHA form (e.g.,
actions/setup-node@<commit-sha> and actions/checkout@<commit-sha>) by looking up
the corresponding repository commit hash on GitHub and updating lines where
`uses: actions/setup-node@v6` and `uses: actions/checkout@v4` appear so each of
the three occurrences is pinned.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: 9fb92c7a-4439-4c12-bcf6-d33e06f54724

📥 Commits

Reviewing files that changed from the base of the PR and between ef34e36 and bdf59bf.

📒 Files selected for processing (1)
  • .github/workflows/test.yml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants