Skip to content

chore(deps): bump actions/setup-node from 4 to 7 - #144

Merged
nateshpp merged 3 commits into
mainfrom
chore/bump-actions-setup-node-v7
Jul 28, 2026
Merged

chore(deps): bump actions/setup-node from 4 to 7#144
nateshpp merged 3 commits into
mainfrom
chore/bump-actions-setup-node-v7

Conversation

@nateshpp

@nateshpp nateshpp commented Jul 28, 2026

Copy link
Copy Markdown
Collaborator

What this PR does

Recreates Dependabot's #137 with the repo's snapshot regenerated, since Dependabot's own PR fails this repo's check:snapshot gate (it has no way to know this repo requires .modonome/snapshot/* regenerated alongside any tracked-file change). Same version bump, same diff across all 9 files; Dependabot's #137 will be closed as superseded.

  • actions/setup-node bumped to 7 across action.yml, ci.yml, modonome-auto.yml, modonome-review.yml, modonome-schedule.yml, publish-edge.yml, publish.yml, self-govern.yml, sync-site-data.yml (tag-pinned references move to v7; SHA-pinned references move to the v7.0.0 commit SHA, matching Dependabot's own resolution).
  • .modonome/snapshot/* regenerated to match.
  • Follow-up fix: scripts/agent/triggers.mjs, the generator for modonome-schedule.yml, had the setup-node SHA hardcoded in two places (a constant and a separate template comment); only the constant was in sync before this PR's second commit, which fixes both so the generator's output matches what is committed.

Governance checklist

  • npm run verify gates relevant to this diff pass locally (style, repo hygiene, snapshot freshness, attestation freshness, self-application conformance, gate DAG)
  • No em dashes in any tracked file
  • No AI co-author lines in commit messages
  • If ratchet logic changed: N/A, no ratchet files touched (only the Node setup step's action version)
  • If a new AgentProof scenario: N/A
  • If config schema changed: N/A
  • If prompt changed: N/A

Test evidence

node scripts/snapshot.mjs . --check
Snapshot is current.

npm run check:attestation
PASS: .modonome/policy-attestation.json is current.

node scripts/check-style.mjs .
Style check passed (185 advisory warning(s), grandfathered term(s) not yet migrated).

node scripts/check-repo-hygiene.mjs
Repo hygiene check passed. No loose ends detected.

node scripts/check-self-application.mjs
PASS: every repo-local self-governance invariant holds.

node scripts/check-gate-dag.mjs
Gate graph valid.

npm test
# tests 914
# pass 914
# fail 0

nateshpp added 2 commits July 28, 2026 04:05
The generator hardcoded the SHA in one constant and its version-label
comment separately in a template string; only the constant had been
updated, so the committed modonome-schedule.yml (correct) diverged
from what the generator would produce, failing tests/triggers.test.mjs.
…tup-node-v7

# Conflicts:
#	.modonome/snapshot/map.json
#	.modonome/snapshot/map.md
#	.modonome/snapshot/signature.json
@nateshpp
nateshpp merged commit 0a3019b into main Jul 28, 2026
6 checks passed
@nateshpp
nateshpp deleted the chore/bump-actions-setup-node-v7 branch July 28, 2026 04:21
nateshpp added a commit that referenced this pull request Jul 28, 2026
* Revert "chore(deps): bump ossf/scorecard-action, github/codeql-action, and actions/checkout (#145)"

This reverts commit b9aefda.

* Revert "chore(deps): bump actions/setup-node from 4 to 7 (#144)"

This reverts commit 0a3019b.

* Revert "chore(deps): bump actions/attest from 2 to 4 (#142)"

This reverts commit d44421a.
nateshpp added a commit that referenced this pull request Jul 28, 2026
* chore(deps): bump actions/setup-node from 4 to 7

* Fix triggers.mjs setup-node pin to match the actual bump

The generator hardcoded the SHA in one constant and its version-label
comment separately in a template string; only the constant had been
updated, so the committed modonome-schedule.yml (correct) diverged
from what the generator would produce, failing tests/triggers.test.mjs.
nateshpp added a commit that referenced this pull request Jul 28, 2026
* Revert "chore(deps): bump ossf/scorecard-action, github/codeql-action, and actions/checkout (#145)"

This reverts commit b9aefda.

* Revert "chore(deps): bump actions/setup-node from 4 to 7 (#144)"

This reverts commit 0a3019b.

* Revert "chore(deps): bump actions/attest from 2 to 4 (#142)"

This reverts commit d44421a.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant