Skip to content

chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 - #24479

Merged
hivecommons-hive[bot] merged 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-7.1.0
Oct 19, 2026
Merged

hivecommons-hive[bot] merged 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-7.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/setup-node from 7.0.0 to 7.1.0.

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits
  • 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
  • 7207c4f chore: update dependencies and add license files (#1642)
  • 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
  • fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
  • 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
  • 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
  • a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
  • 680d1e4 Support absolute paths in node-version-file (#1633)
  • db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
  • 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 19, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@kubestellar-prow kubestellar-prow Bot added the dco-signoff: yes Indicates the PR's author has signed the DCO. label Oct 19, 2026
@kubestellar-prow

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign mikespreitzer for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@github-actions

Copy link
Copy Markdown
Contributor

👋 Hey @dependabot[bot] — thanks for opening this PR!

🤖 This project is developed exclusively using AI coding assistants.

Please do not attempt to code anything for this project manually.
All contributions should be authored using an AI coding tool such as:

This ensures consistency in code style, architecture patterns, test coverage,
and commit quality across the entire codebase.


This is an automated message.

@kubestellar-prow kubestellar-prow Bot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label Oct 19, 2026
@netlify

netlify Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for kubestellarconsole canceled.

Name Link
🔨 Latest commit 9bffe1e
🔍 Latest deploy log https://app.netlify.com/projects/kubestellarconsole/deploys/6ad629383ba7155ea395e6ec

@github-actions github-actions Bot added ai-generated Pull request generated by AI tier/3-restricted labels Oct 19, 2026
@hivecommons-hive hivecommons-hive Bot added dco All commits are DCO signed-off role/trusted Author is trusted for unattended merge (trusted-author role or registry/claim tier in require_tiers) stage/050-review-pending Review swarm requested; awaiting a verdict for the current head and removed dco-signoff: yes Indicates the PR's author has signed the DCO. labels Oct 19, 2026
@hivecommons-hive

Copy link
Copy Markdown
Contributor
9bffe1e

ℹ️ Sentinel notice — informational; author is trusted (allow-listed bot), merge is not blocked

Hive flagged this PR (author @dependabot[bot], head 9bffe1ea1658) because it matches behaviors that can override security controls, escalate privileges or damage the codebase. This is a heuristic, not an accusation — a maintainer should confirm the change is intended before it merges.

  • sensitive_path — changes 39 sensitive path(s) (Touches a sensitive path (OWNERS, workflows, policies, hive config, security docs, …))
    • .github/workflows/_perf-regression-issue.yml
    • .github/workflows/a11y-audit.yml
    • .github/workflows/accm-history-update.yml
    • .github/workflows/auto-qa.yml
    • .github/workflows/auto-triage.lock.yml
    • .github/workflows/card-standard-nightly.yml
    • .github/workflows/console-live-macos-canary.yml
    • .github/workflows/console-live-promote.yml
    • .github/workflows/coverage-gate.yml
    • .github/workflows/coverage-hourly.yml
    • .github/workflows/coverage-report.yml
    • .github/workflows/fullstack-e2e.yml
    • .github/workflows/ga4-error-monitor.yml
    • .github/workflows/ga4-error-regression.yml
    • .github/workflows/ga4-mobile-monitor.yml
    • .github/workflows/implement-fix.lock.yml
    • .github/workflows/kb-nightly-validation.yml
    • .github/workflows/lint-warning-gate.yml
    • .github/workflows/mission-control-kind-e2e.yml
    • .github/workflows/nightly-compliance.yml
    • .github/workflows/nightly-dashboard-health.yml
    • .github/workflows/nightly-test-suite.yml
    • .github/workflows/nightly-ux-journeys.yml
    • .github/workflows/perf-bundle-size.yml
    • .github/workflows/perf-react-commits-idle.yml
    • .github/workflows/perf-react-commits.yml
    • .github/workflows/perf-ttfi.yml
    • .github/workflows/playwright-nightly.yml
    • .github/workflows/playwright.yml
    • .github/workflows/post-merge-verify.yml
    • .github/workflows/pr-closed-verification.yml
    • .github/workflows/pre-merge-gate.yml
    • .github/workflows/release.yml
    • .github/workflows/rewards-types-drift.yml
    • .github/workflows/route-smoke.yml
    • .github/workflows/startup-smoke-test.yml
    • .github/workflows/startup-smoke.yml
    • .github/workflows/ui-ux-standard.yml
    • .github/workflows/visual-regression.yml

Hive did not add the sentinel-alert label because this author is trusted. The finding remains recorded for audit and the dashboard Security tab; set sentinel.trusted_authors_block: true to require the blocking label for trusted authors too.

@hivecommons-hive
hivecommons-hive Bot merged commit 793baa1 into main Oct 19, 2026
44 of 45 checks passed
@kubestellar-prow
kubestellar-prow Bot deleted the dependabot/github_actions/actions/setup-node-7.1.0 branch October 19, 2026 15:01
@github-actions

Copy link
Copy Markdown
Contributor

Thank you for your contribution! Your PR has been merged.

Check out what's new:

Stay connected: Slack #kubestellar-dev | Multi-Cluster Survey

@hivecommons-hive hivecommons-hive Bot removed role/trusted Author is trusted for unattended merge (trusted-author role or registry/claim tier in require_tiers) stage/050-review-pending Review swarm requested; awaiting a verdict for the current head labels Oct 19, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Post-merge build verification passed ✅

Both Go and frontend builds compiled successfully against merge commit 793baa1df8e6c2a81e1e39ae5d9f619612308fb2.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ai-generated Pull request generated by AI dco All commits are DCO signed-off dependencies Pull requests that update a dependency file size/M Denotes a PR that changes 30-99 lines, ignoring generated files. tier/3-restricted

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants