Skip to content

chore(deps): bump actions/setup-node from 4 to 6#9

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-6
Open

chore(deps): bump actions/setup-node from 4 to 6#9
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-6

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 30, 2026

Bumps actions/setup-node from 4 to 6.

Release notes

Sourced from actions/setup-node's releases.

v6.0.0

What's Changed

Breaking Changes

Dependency Upgrades

Full Changelog: actions/setup-node@v5...v6.0.0

v5.0.0

What's Changed

Breaking Changes

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

New Contributors

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 30, 2026
@dependabot dependabot Bot changed the title build(deps): bump actions/setup-node from 5 to 6 chore(deps): bump actions/setup-node from 4 to 6 May 1, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-6 branch 2 times, most recently from b1fa6cd to 730cfa1 Compare May 1, 2026 17:11
topcoder1 added a commit that referenced this pull request May 1, 2026
…Rs (#16)

claude-code-action@v1 currently crashes when invoked on a dependabot
PR with the error:

  Internal error: directory mismatch for directory
  "/home/runner/work/_actions/anthropics/claude-code-action/v1/tsconfig.json", fd 4

Verified across #7, #8, #9 — three consecutive
dependabot PRs, all FAILURE on `review / Claude Review`. The same
action+version succeeds on human-authored PRs in the same repo, so
the bug is specific to dependabot's restricted GITHUB_TOKEN scope.

Even when the action does run on dep bumps, the value is low —
diffs are upstream version metadata, not project logic. The risk
classifier still labels them; humans still see the diff at merge
time. Skipping Claude review here is signal, not loss.

Implementation: a pre-check step posts a one-line "Skipped" PR
comment when the PR author is dependabot[bot] or renovate[bot],
sets a step output, and the claude-code-action step is gated on
that output. The job remains green so branch rulesets that require
`review / Claude Review` are satisfied.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@topcoder1
Copy link
Copy Markdown
Owner

Reopening to trigger fresh CI with updated claude-review.yml (#16 merged)

@topcoder1 topcoder1 closed this May 1, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 1, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@topcoder1 topcoder1 reopened this May 1, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-6 branch from 730cfa1 to a02d65c Compare May 1, 2026 22:37
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 1, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-6 branch from a02d65c to 2cfa38b Compare May 2, 2026 00:33
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 2, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-6 branch from 2cfa38b to 6d6b608 Compare May 10, 2026 14:37
@github-actions
Copy link
Copy Markdown

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-6 branch from 6d6b608 to ebb0cb6 Compare May 14, 2026 21:58
@github-actions
Copy link
Copy Markdown

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@github-actions
Copy link
Copy Markdown

Coverage Floor — mode: enforce

metric value
measured 100.0%
floor (current) 99.0%
target 100.0%
last bumped 2026-05-12

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant