chore(deps): bump the actions group with 4 updates by dependabot[bot] · Pull Request #146 · Miroshka000/mikan

dependabot · 2026-10-15T11:15:50Z

Bumps the actions group with 4 updates: actions/setup-node, taiki-e/install-action, actions/upload-artifact and actions/download-artifact.

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Add support for mise.toml file by @gperdomor in actions/setup-node#1421

Support absolute paths in node-version-file by @v-mahabaleshwars in actions/setup-node#1633

Bug fixes:

Add Node version validation and manifest fetch retry by @v-jitenderpalsingh in actions/setup-node#1580

Documentation updates:

README.md: bump actions/checkout to latest version 7 by @deining in actions/setup-node#1578

docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @v-gowridurgad in actions/setup-node#1593

Fixed cache recommendation syntax by @SubJunk in actions/setup-node#1603

Dependency updates:

Update workflow pins and migrate Node matrices to modern versions by @v-HarithaVattikuti in actions/setup-node#1583

Upgrade @actions/cache to 6.2.0 by @philip-gai in actions/setup-node#1584

Pin @types/node to v24 by @v-priyagupta108 in actions/setup-node#1585

Override brace-expansion to 5.0.8 by @v-priyagupta108 with @Copilot in actions/setup-node#1599

Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in actions/setup-node#1598

Upgrade prettier from 3.8.4 to 3.9.6 by @dependabot in actions/setup-node#1590

Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in actions/setup-node#1610

Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @dependabot in actions/setup-node#1602

Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @dependabot in actions/setup-node#1629

Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in actions/setup-node#1616

Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in actions/setup-node#1615

Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @dependabot in actions/setup-node#1631

Upgrade jest-each from 30.4.1 to 30.5.2 by @dependabot in actions/setup-node#1636

Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @dependabot in actions/setup-node#1638

Update dependencies and add license files by @v-HarithaVattikuti in actions/setup-node#1642

Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @dependabot in actions/setup-node#1635

New Contributors

@v-jitenderpalsingh made their first contribution in actions/setup-node#1580

@philip-gai made their first contribution in actions/setup-node#1584

@gperdomor made their first contribution in actions/setup-node#1421

@SubJunk made their first contribution in actions/setup-node#1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits

949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
7207c4f chore: update dependencies and add license files (#1642)
54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
0c54c7b Bump @typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
a829419 Bump @types/semver from 7.7.1 to 7.8.0 (#1616)
680d1e4 Support absolute paths in node-version-file (#1633)
db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
Additional commits viewable in compare view

Updates taiki-e/install-action from 2.87.25 to 2.87.28

Release notes

Sourced from taiki-e/install-action's releases.

2.87.28

Update dprint@latest to 0.62.0.

Update vacuum@latest to 0.33.0.

Update uv@latest to 0.13.0.

Update tombi@latest to 1.8.1.

Update release-plz@latest to 0.3.171.

Update rclone@latest to 1.75.2.

Update mise@latest to 2026.10.7.

Update cargo-binstall@latest to 1.25.3.

2.87.27

Update vacuum@latest to 0.32.0.

Update uv@latest to 0.12.24.

Update typos@latest to 1.51.1.

Update tombi@latest to 1.7.3.

Update syft@latest to 1.54.1.

Update release-plz@latest to 0.3.170.

Update mise@latest to 2026.10.4.

Update kingfisher@latest to 2.11.1.

Update hyperfine@latest to 2.0.0.

Update dprint@latest to 0.61.1.

Update cargo-nextest@latest to 0.9.148.

Update cargo-neat@latest to 0.6.0.

Update cargo-binstall@latest to 1.25.2.

2.87.26

Update tombi@latest to 1.7.2.

Update prek@latest to 0.5.5.

Update mise@latest to 2026.10.3.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.87.28] - 2026-10-12

Update dprint@latest to 0.62.0.

Update vacuum@latest to 0.33.0.

Update uv@latest to 0.13.0.

Update tombi@latest to 1.8.1.

Update release-plz@latest to 0.3.171.

Update rclone@latest to 1.75.2.

Update mise@latest to 2026.10.7.

Update cargo-binstall@latest to 1.25.3.

[2.87.27] - 2026-10-09

Update vacuum@latest to 0.32.0.

Update uv@latest to 0.12.24.

Update typos@latest to 1.51.1.

Update tombi@latest to 1.7.3.

Update syft@latest to 1.54.1.

Update release-plz@latest to 0.3.170.

Update mise@latest to 2026.10.4.

Update kingfisher@latest to 2.11.1.

Update hyperfine@latest to 2.0.0.

... (truncated)

Commits

1168f68 Release 2.87.28
db1b909 Update tombi@latest to 1.8.1
4fe7379 Update tombi manifest
7443747 Update osv-scanner manifest
6ff1c9b Update kingfisher manifest
cb40720 Update kache manifest
4c1bf34 Update dprint@latest to 0.62.0
3dfabf7 Update vacuum@latest to 0.33.0
a80e680 Update uv@latest to 0.13.0
10f4ee9 Update tombi@latest to 1.8.0
Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Updates @actions/artifact to v6.3.1.

New Contributors

@tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
c2acded chore: prepare v7.0.2 release
4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
8cbe1be Bump @actions/artifact to 6.3.1
See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

Update the readme by @danwkennedy in actions/download-artifact#473

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Update @actions/artifact to 6.3.1 by @tunc-d in actions/download-artifact#492

Prepare download-artifact v8.0.2 by @tunc-d in actions/download-artifact#493

New Contributors

@tunc-d made their first contribution in actions/download-artifact#492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits

9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
e455989 Prepare download-artifact v8.0.2
a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
29bb7ce Update @actions/artifact to 6.3.1
484a0b5 Update the readme (#473)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

Chores
- Updated the automation supporting build checks, site publishing, and releases. No user-facing features or changes to release behavior are included.

Bumps the actions group with 4 updates: [actions/setup-node](https://github.com/actions/setup-node), [taiki-e/install-action](https://github.com/taiki-e/install-action), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `taiki-e/install-action` from 2.87.25 to 2.87.28 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@183e429...1168f68) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@3e5f45b...9000827) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.87.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-15T11:16:17Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI
Review profile: CHILL
Plan: Advanced
Run ID: 638c590e-ab76-461f-b944-e68496b7f432

📥 Commits

Reviewing files that changed from the base of the PR and between c637389 and 03ca892.

📒 Files selected for processing: 3

.github/workflows/ci.yml
.github/workflows/pages.yml
.github/workflows/release.yml

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 7 remain after this review.

📝 Walkthrough

The CI, Pages, and release workflows update pinned versions of GitHub Actions and the release installer action. Workflow conditions, inputs, and other release behavior remain unchanged.

Changes: Workflow action updates

Layer / File(s)	Summary
Update workflow action pins `.github/workflows/ci.yml`, `.github/workflows/pages.yml`, `.github/workflows/release.yml`	The CI and Pages workflows update `actions/setup-node` to v7.1.0. The release workflow updates `actions/setup-node`, `taiki-e/install-action`, `actions/upload-artifact`, and `actions/download-artifact` pins.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: miroshka000

Merge Risk: ⚪ Minimal · up to 03ca8

The PR updates pinned workflow actions without changing workflow behavior. No concrete regression is evident, so it is ready for normal CI checks.

### Architecture Summary

Architecture risk: 🔵 Low · up to 03ca8

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

observed — Modified behavior in .github/workflows/ci.yml: The panel job switches actions/setup-node from the pinned v7.0.0 commit to the pinned v7.1.0 commit.
observed — Modified behavior in .github/workflows/pages.yml: The workflow replaces the actions/setup-node v7.0.0 commit pin with the v7.1.0 commit pin.
observed — Modified behavior in .github/workflows/release.yml: The test job now uses actions/setup-node v7.1.0 instead of v7.0.0.
observed — Modified behavior in .github/workflows/release.yml: The installer job now uses taiki-e/install-action v2.87.28 instead of v2.87.25.

Pre-merge checks: 5

Passed checks: 5 passed

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly identifies a dependency update affecting four GitHub Actions. It matches the main change in the pull request.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches: 💡 1

🧪 Generate unit tests (beta)

Commit to this branch
Create a new PR

🛠️ Fix failing CI checks: 💡

Commit to this branch
Create a new PR

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

Miroshka000 · 2026-10-18T15:53:54Z

Closing: dependency bumps are done by hand.

dependabot · 2026-10-18T15:53:57Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

Miroshka000 · 2026-10-18T15:56:53Z

@dependabot rebase

dependabot · 2026-10-18T15:56:56Z

Looks like this PR is closed. If the branch still exists, you can re-open the PR and then use @dependabot rebase or @dependabot recreate. If the branch was deleted, Dependabot will create a new PR on the next scheduled run, or you can trigger an update from the Dependency graph page.

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 15, 2026

dependabot Bot requested a review from Miroshka000 as a code owner October 15, 2026 11:15

Miroshka000 closed this Oct 18, 2026

dependabot Bot deleted the dependabot/github_actions/dev/actions-820ccf4478 branch October 18, 2026 15:54

Navigation Menu

Repository navigation

chore(deps): bump the actions group with 4 updates - #146

chore(deps): bump the actions group with 4 updates#146
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/dev/actions-820ccf4478

dependabot Bot commented on behalf of github Oct 15, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Oct 15, 2026 •

edited

Loading

Uh oh!

Miroshka000 commented Oct 18, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 18, 2026

Uh oh!

Miroshka000 commented Oct 18, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 18, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 15, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

2.87.28

2.87.27

2.87.26

Changelog

[Unreleased]

[2.87.28] - 2026-10-12

[2.87.27] - 2026-10-09

v7.0.2

What's Changed

New Contributors

v8.0.2

What's Changed

New Contributors

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Oct 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Miroshka000 commented Oct 18, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 18, 2026

Uh oh!

Miroshka000 commented Oct 18, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 18, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 15, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Oct 15, 2026 •

edited

Loading