Repository navigation
chore(actions)(deps): bump actions/setup-node from 6.5.0 to 7.1.0 - #19
Merged
TheStreamCode merged 1 commit intoOct 14, 2026
Merged
Conversation
dependabot
Bot
added
the
dependencies
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
6 of 8 tasks
TheStreamCode
added a commit
that referenced
this pull request
Oct 14, 2026
## Summary Fixes the failing pm audit gate on CI. The full-tree audit ( pm audit --audit-level=high) fails with 1 high-severity advisory on transitive �race-expansion 5.0.9 (GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-6j4f-fj2g-mc7p), reached via eslint -> minimatch -> brace-expansion. Unblocks #19 and #20, which fail on the same gate for the same pre-existing reason. ## Changes - package-lock.json: �race-expansion 5.0.9 -> 5.0.12 via pm audit fix (3 lines, no package.json change, no runtime code touched) ## Testing - [x] pm run lint && npm test passes (178 pass, 0 fail, 2 skipped) - [x] Tested on Windows - [ ] Tested on macOS / Linux (covered by the CI matrix) - [ ] Verified with at least one real provider (N/A: lockfile-only change, no runtime behavior affected) - [x] pm audit --audit-level=high and pm audit --omit=dev --audit-level=high both report 0 vulnerabilities ## Checklist - [x] PR is focused on a single concern - [x] README.md updated if user-facing behavior changed (N/A: no behavior change) - [x] No API keys or credentials in code or examples - [x] New provider entries document the base URL, model behavior, and authentication requirements (N/A: no provider changes) - [x] Credential environment names are registered and tested when authentication is required (N/A) ## Notes - After merge, re-running checks on #19 and #20 (or rebasing them) should turn them green.
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.5.0 to 7.1.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v6.5.0...949feb2) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions/setup-node-7.1.0
branch
from
October 14, 2026 19:27
1731879 to
edd2e8d
Compare
TheStreamCode
deleted the
dependabot/github_actions/actions/setup-node-7.1.0
branch
October 14, 2026 20:10
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps actions/setup-node from 6.5.0 to 7.1.0.
Release notes
Sourced from actions/setup-node's releases.
... (truncated)
Commits
949feb2Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)7207c4fchore: update dependencies and add license files (#1642)54337e0Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)fb54fa8Bump jest-each from 30.4.1 to 30.5.2 (#1636)7f84f1dBump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)0c54c7bBump@typescript-eslint/parserfrom 8.62.0 to 8.70.0 (#1615)a829419Bump@types/semverfrom 7.7.1 to 7.8.0 (#1616)680d1e4Support absolute paths in node-version-file (#1633)db0fb3aBump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)94196eeBump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)