78:T24b1,Bumps [actions/setup\-node](https://github.com/actions/setup-node) from 5.0.0 to 7.0.0.

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in actions/setup-node#1577

Migrate to ESM and upgrade dependencies by @gowridurgad in actions/setup-node#1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in actions/setup-node#1558

Only use mirrorToken in getManifest if it's provided by @deiga in actions/setup-node#1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in actions/setup-node#1536

docs: Update restore-only cache documentation by @priya-kinthali in actions/setup-node#1550

docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in actions/setup-node#1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-node#1569

New Contributors

@chiranjib-swain made their first contribution in actions/setup-node#1536

@deiga made their first contribution in actions/setup-node#1548

@jasongin made their first contribution in actions/setup-node#1569

Full Changelog: https://github.com/actions/setup-node/compare/v6...v7.0.0

v6.5.0

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in actions/setup-node#1579

Full Changelog: https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0

v6.4.0

What's Changed

Dependency updates:

Upgrade @actions dependencies by @Copilot in actions/setup-node#1525

Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in actions/setup-node#1533

New Contributors

@Copilot made their first contribution in actions/setup-node#1525

Full Changelog: https://github.com/actions/setup-node/compare/v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in actions/setup-node#1283

... (truncated)

Commits

8207627 Migrate to ESM and upgrade dependencies (#1574)
04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
30eb73b Resolve high-severity audit issues
4e1a87a Update dist
360237f Strict equality
4f8aac5 Bump @actions/cache to 5.1.0, log cache write denied
f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
Additional commits viewable in compare view

[![Dependabot compatibility score](https://cdn.trylle.com/media/images/d000e26c97aa2abcccee18e5f8689fe4?key=ARu1inSjZFjjRACQzxiXrHfprMe%2F7QpTtDFcy%2FdqNwWMxXCUHHnD3%2BxXiXBpXc7688ToCyxwFqxw366wSs3lN838M%2BhyySwH4h9XfXTF6A%2FiAIsT9RTJdi50Y35gYDRJViRfOGz4DF%2FISAjpRYm1%2B2TTuVJ6z23GSoS%2BEnAWNZELBZElu%2Bs7%2FjjD0vP2K%2FMBpddqcdeTf4%2BVN%2B3AZnlbxtAjU4cVar3rQhwicCVDwGqxj3H16chHn2D%2FSQI%2BQmz1o9Juqm1s3fPeFLf6QjVpF8MoDFyJA%2FeGqTLMxHJDhpFzdYiY5p%2BToS0IypySYMI6TkFH8lRbJyMcJ6bx2UN1HXi2riE%3D)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. ***

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. 62:["$","$L75",null,{"entries":[{"key":["platform",{"userId":"anon"},"pulls","page",{"owner":"skills","repo":"starslingdev-skills","pullNumber":92}],"data":{"repositoryId":"5370","detail":{"author":{"avatarUrl":"https://cdn.trylle.com/media/images/ee9ce3e41ccd83d0d82b44c3a379d115?key=ATdRna3MzMw8Hlfnq4en2QfWXAbcWt7Gs%2B6LJIK5idPcU0A%2BKMm36g5Tn87RFkNzLx0sTBQTbDz6ZwuI50wQwsUFZKKL3VMmSNfiwnzZKqg8A54YBKUuHI2wXCpWkb7sqOYvytoTlV%2FbmplzTzLHxkMr5yQlXx9xXA5X3EIK7cL6DdayqPfO1B6%2B0g%3D%3D","externalProvider":"github","login":"dependabot[bot]","type":"Bot","url":"https://github.com/apps/dependabot"},"authorId":"49699333","baseRefName":"main","closedAt":null,"comments":2,"createdAt":"2026-09-08T22:39:53Z","headRefName":"dependabot/github_actions/actions/setup-node-7.0.0","id":"4958032","isDraft":false,"labels":[{"color":"0366d6","description":"Pull requests that update a dependency file","name":"dependencies"},{"color":"000000","description":"Pull requests that update GitHub Actions code","name":"github_actions"}],"number":92,"repository":{"name":"starslingdev-skills","owner":"skills","provider":"forgejo"},"state":"open","title":"chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0","updatedAt":"2026-10-22T04:34:46Z","url":"https://trylle.com/skills/starslingdev-skills/pulls/92","body":"$78","additions":2,"deletions":2,"changedFiles":1,"commits":1,"reviewComments":1,"headSha":"e4fca3463b9acb6a97669c19929bc48dfd80d8db","baseSha":"92761526c04c0212b6cd5bf97ecf6f9efc614f68","headRepoOwner":"skills","headRepoName":"starslingdev-skills","isMerged":false,"mergeCommitSha":null,"mergedBy":null,"mergeable":true,"mergeableState":"clean","conflictingFiles":null,"requestedTeams":[],"requestedReviewers":[],"graphqlId":"issue:92","reactions":{"counts":{"+1":1},"viewerReacted":null,"userLoginsByContent":{"+1":["greptile-apps[bot](github)"]}}},"comments":[{"id":27025175,"graphqlId":"27025175","body":"

Confidence Score: 5/5

\n\nThe PR appears safe to merge because both CI paths retain their existing Node version and use the same fully pinned setup-node release.\n\nNo concrete correctness, security, or repository-rule violation remains after reviewing the action upgrade and its self-hosted runner requirement.\n\n

Important Files Changed

\n\n\n\n\n| Filename | Overview |\n|----------|----------|\n| .github/workflows/ci.yml | Updates the pinned setup-node action consistently across both CI test jobs without changing workflow behavior. |\n\n\n\n\n_{Reviews (1): Last reviewed commit: [\"chore(deps): bump actions/setup-node fro...\"](https://github.com/starslingdev/skills/commit/e4fca3463b9acb6a97669c19929bc48dfd80d8db) | [Re-trigger Greptile](https://app.greptile.com/api/retrigger?id=61844993)}","createdAt":"2026-09-08T22:41:35Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/d5fdefbe765e9f429d38a31328621291?key=Acl0%2BlhblDOxCrSlqfonNDhgrt1LwjH88FRgEld3W8TJMWD14w5hVMk945%2FUo6%2F4SXM8sWkkR1IS3%2FPkJicqQw3Nzkwzis1r900F6Ii81AW%2B6%2FgoEHT7u6ClQhGHk5zI5yHvly2ZTjc6HDW38z1iK%2FBzByCTQdN9niTDbBlKfNdTv6bYqay%2Boc9at4A%3D","externalProvider":"github","login":"greptile-apps[bot]","type":"Bot","url":"https://github.com/apps/greptile-apps"}}],"commits":[{"sha":"e4fca3463b9acb6a97669c19929bc48dfd80d8db","message":"chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0\n\nBumps [actions/setup-node](https://github.com/actions/setup-node) from 5.0.0 to 7.0.0.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/a0853c24544627f65ddf259abe73b1d18a591444...820762786026740c76f36085b0efc47a31fe5020)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] ","createdAt":"2026-09-08T22:39:52Z","author":{"avatarUrl":"","login":"","name":"dependabot[bot]","type":"User","url":""},"verification":{"verified":false,"reason":"gpg.error.no_gpg_keys_found"}}],"events":[],"reviews":[{"id":3637155,"state":"REQUEST_REVIEW","author":{"avatarUrl":"https://cdn.trylle.com/media/images/d3ca344be561aba8d638fb69a8cff725?key=ARy9R4vZMggxp1eazbSEJsCTa%2BRt22KAJU%2B5c4j1VKzS4SUBV38XoUBDVyx1RR60qNIBIJVbAw4lTOz4g1SuCMEiOymbPi%2F1j28BXNg1ySnXf1cOE%2FlJESyC9pw9vfYlR2B%2FSy1vQWA4qSg%2FoGJTILweY9ojwWFCZl5rxLhMDjCvi1xtSevMGFyY","externalProvider":"github","login":"yonasb","type":"User","url":"https://github.com/yonasb"},"submittedAt":"2026-09-08T22:39:53Z","official":false}],"stackEvents":[],"commentPagination":{"totalCount":2,"perPage":30,"loadedPages":[1]},"eventPagination":{"loadedPages":[1],"hasMore":false},"headRefDeleted":false},"fetchedAt":1793412844610}],"children":"$L79"}] 64:null 6b:[["$","title","0",{"children":"Commits · chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0 · skills/starslingdev-skills | Trylle"}],["$","meta","1",{"name":"description","content":"Commits on chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0 (#92) in skills/starslingdev-skills."}],["$","meta","2",{"name":"application-name","content":"Trylle"}],["$","link","3",{"rel":"manifest","href":"/manifest.json","crossOrigin":"$undefined"}],["$","meta","4",{"name":"keywords","content":"Commits · chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0 · skills/starslingdev-skills, skills/starslingdev-skills, skills/starslingdev-skills repository, starslingdev-skills, Python repository, source code, trylle, agent-native git platform, git platform for agents and humans, git platform for ai agents, coding agent pull requests, ai code review, repository automation, stacked pull requests, two-way github sync, github-compatible actions, try cli"}],["$","meta","5",{"name":"robots","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","6",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","7",{"name":"googlebot","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","8",{"name":"twitter:domain","content":"trylle.com"}],["$","meta","9",{"name":"twitter:url","content":"https://trylle.com/skills/starslingdev-skills/pulls/92/commits"}],["$","link","10",{"rel":"canonical","href":"https://trylle.com/skills/starslingdev-skills/pulls/92/commits"}],["$","meta","11",{"name":"format-detection","content":"telephone=no"}],["$","meta","12",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","13",{"name":"apple-mobile-web-app-title","content":"Trylle"}],["$","meta","14",{"name":"apple-mobile-web-app-status-bar-style","content":"black-translucent"}],["$","meta","15",{"property":"og:title","content":"Commits · chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0 · skills/starslingdev-skills | Trylle"}],["$","meta","16",{"property":"og:description","content":"Commits on chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0 (#92) in skills/starslingdev-skills."}],["$","meta","17",{"property":"og:url","content":"https://trylle.com/skills/starslingdev-skills/pulls/92/commits"}],["$","meta","18",{"property":"og:site_name","content":"Trylle"}],["$","meta","19",{"property":"og:locale","content":"en_US"}],["$","meta","20",{"property":"og:image","content":"https://trylle.com/api/og.png?kind=repo&owner=skills&repo=starslingdev-skills"}],["$","meta","21",{"property":"og:image:secure_url","content":"https://trylle.com/api/og.png?kind=repo&owner=skills&repo=starslingdev-skills"}],["$","meta","22",{"property":"og:image:type","content":"image/png"}],["$","meta","23",{"property":"og:image:width","content":"1200"}],["$","meta","24",{"property":"og:image:height","content":"630"}],["$","meta","25",{"property":"og:image:alt","content":"skills/starslingdev-skills repository preview on Trylle"}],["$","meta","26",{"property":"og:type","content":"website"}],["$","meta","27",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","28",{"name":"twitter:site","content":"@trylle"}],["$","meta","29",{"name":"twitter:title","content":"Commits · chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0 · skills/starslingdev-skills | Trylle"}],["$","meta","30",{"name":"twitter:description","content":"Commits on chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0 (#92) in skills/starslingdev-skills."}],["$","meta","31",{"name":"twitter:image","content":"https://trylle.com/api/og.png?kind=repo&owner=skills&repo=starslingdev-skills"}],["$","meta","32",{"name":"twitter:image:alt","content":"skills/starslingdev-skills repository preview on Trylle"}],["$","link","33",{"rel":"icon","href":"/favicon.png","type":"image/png"}],["$","link","34",{"rel":"icon","href":"/favicon-white.png","type":"image/png","media":"(prefers-color-scheme: dark)"}],"$L7a","$L7b"]

Commits on Tue, Sep 8, 2026