Skip to content

chore(deps): bump actions/setup-node from 4 to 6#9

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-6
Open

chore(deps): bump actions/setup-node from 4 to 6#9
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-node-6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 30, 2026 •
edited
Loading

Bumps actions/setup-node from 4 to 6.

Release notes

Sourced from actions/setup-node's releases.

v6.0.0

What's Changed

Breaking Changes

Dependency Upgrades

Full Changelog: actions/setup-node@v5...v6.0.0

v5.0.0

What's Changed

Breaking Changes

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

New Contributors

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 30, 2026
@dependabot dependabot Bot changed the title build(deps): bump actions/setup-node from 5 to 6 chore(deps): bump actions/setup-node from 4 to 6 May 1, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-6 branch 2 times, most recently from b1fa6cd to 730cfa1 Compare May 1, 2026 17:11
@topcoder1 topcoder1 mentioned this pull request May 1, 2026
Merged
topcoder1 added a commit that referenced this pull request May 1, 2026
@topcoder1 @claude
fix(claude-review): skip claude-code-action for dependabot/renovate P…
bd507f6 
…Rs (#16)

claude-code-action@v1 currently crashes when invoked on a dependabot
PR with the error:

  Internal error: directory mismatch for directory
  "/home/runner/work/_actions/anthropics/claude-code-action/v1/tsconfig.json", fd 4

Verified across #7, #8, #9 — three consecutive
dependabot PRs, all FAILURE on `review / Claude Review`. The same
action+version succeeds on human-authored PRs in the same repo, so
the bug is specific to dependabot's restricted GITHUB_TOKEN scope.

Even when the action does run on dep bumps, the value is low —
diffs are upstream version metadata, not project logic. The risk
classifier still labels them; humans still see the diff at merge
time. Skipping Claude review here is signal, not loss.

Implementation: a pre-check step posts a one-line "Skipped" PR
comment when the PR author is dependabot[bot] or renovate[bot],
sets a step output, and the claude-code-action step is gated on
that output. The job remains green so branch rulesets that require
`review / Claude Review` are satisfied.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@topcoder1
Copy link
Copy Markdown
Owner

topcoder1 commented May 1, 2026

Reopening to trigger fresh CI with updated claude-review.yml (#16 merged)

@topcoder1 topcoder1 closed this May 1, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 1, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@topcoder1 topcoder1 reopened this May 1, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-6 branch from 730cfa1 to a02d65c Compare May 1, 2026 22:37
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 1, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-6 branch from a02d65c to 2cfa38b Compare May 2, 2026 00:33
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 2, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-6 branch from 2cfa38b to 6d6b608 Compare May 10, 2026 14:37
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 10, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-6 branch from 6d6b608 to ebb0cb6 Compare May 14, 2026 21:58
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 14, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 14, 2026 •
edited
Loading

Coverage Floor — mode: enforce

metric value
measured 100.0%
floor (current) 99.0%
target 100.0%
last bumped 2026-05-12

@dependabot
chore(deps): bump actions/setup-node from 4 to 6
ea55fd7 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/setup-node-6 branch from ebb0cb6 to ea55fd7 Compare May 24, 2026 03:25
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 24, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@topcoder1