Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: actions/setup-node
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: copilot/research-node-auth-token-usage
Choose a base ref
...
head repository: actions/setup-node
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 20 commits
  • 100 files changed
  • 14 contributors

Commits on Apr 16, 2026

  1. Upgrade @actions dependencies (#1525)

    * chore: upgrade @actions dependencies and update licenses
    
    - @actions/core: ^1.11.1 → ^2.0.3
    - @actions/cache: ^5.0.1 → ^5.0.5
    - @actions/glob: ^0.5.0 → ^0.5.1
    - @actions/http-client: ^2.2.1 → ^3.0.2
    - @actions/tool-cache: ^2.0.2 → ^3.0.1
    - @actions/io: ^1.0.2 → ^2.0.0
    - Run npm audit fix
    - Update license files for new versions
    - Rebuild dist files
    
    Agent-Logs-Url: https://github.com/actions/setup-node/sessions/872a3dbf-9b85-446b-963b-9127718d9560
    
    Co-authored-by: gowridurgad <159780674+gowridurgad@users.noreply.github.com>
    
    * fix: update license files to fix Licensed CI failures
    
    Update 5 license records that were out of date after the dependency
    upgrade:
    - brace-expansion: 1.1.12 → 1.1.13
    - fast-xml-builder: 1.0.0 → 1.1.4
    - fast-xml-parser: 5.4.1 → 5.5.11
    - strnum: 2.1.2 → 2.2.3
    - path-expression-matcher: add new record (version 1.4.0, new transitive dep)
    
    Rebuild dist/ files to reflect updated lock file
    
    Agent-Logs-Url: https://github.com/actions/setup-node/sessions/fb0e70ce-ad19-48df-88a4-97f3bdc896cb
    
    Co-authored-by: gowridurgad <159780674+gowridurgad@users.noreply.github.com>
    
    * feat: upgrade @actions/exec to ^2.0.0 and fix license records
    
    - Upgrade @actions/exec from ^1.1.1 to ^2.0.0 in package.json
    - Update package-lock.json via npm install
    - Run `licensed cache` to regenerate license records:
      - Remove exec-1.1.1.dep.yml and exec-2.0.0.dep.yml (replaced by exec.dep.yml)
      - Remove io-1.1.3.dep.yml and io-2.0.0.dep.yml (replaced by io.dep.yml)
      - Create exec.dep.yml (v2.0.0) - single version now in tree
      - Create io.dep.yml (v2.0.0) - @actions/exec@1.1.1's nested io@1.1.3 removed
    - Rebuild dist/ files
    
    Agent-Logs-Url: https://github.com/actions/setup-node/sessions/24a1a530-6840-4445-8262-8342ec739e6d
    
    Co-authored-by: gowridurgad <159780674+gowridurgad@users.noreply.github.com>
    
    ---------
    
    Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
    Co-authored-by: gowridurgad <159780674+gowridurgad@users.noreply.github.com>
    Copilot and gowridurgad authored Apr 16, 2026
    Configuration menu
    Copy the full SHA
    ab72c7e View commit details
    Browse the repository at this point in the history

Commits on Apr 20, 2026

  1. Update Node.js versions in versions.yml and bump package to v6.4.0 (#…

    …1533)
    
    * setup node in local
    
    * update workflows to remove EOL versions
    
    * update node-dist versions in versions.yml
    priya-kinthali authored Apr 20, 2026
    2 Configuration menu
    Copy the full SHA
    48b55a0 View commit details
    Browse the repository at this point in the history

Commits on Apr 23, 2026

  1. Configuration menu
    Copy the full SHA
    670825a View commit details
    Browse the repository at this point in the history

Commits on May 26, 2026

  1. docs: Update restore-only cache documentation (#1550)

    * update restore-only cache example in advanced-usage.md
    
    * fix copilot suggestion
    
    * update naming
    priya-kinthali authored May 26, 2026
    Configuration menu
    Copy the full SHA
    ad1b57e View commit details
    Browse the repository at this point in the history

Commits on May 28, 2026

  1. Remove dummy NODE_AUTH_TOKEN export (#1558)

    Co-authored-by: gowridurgad <gowridurgad@gmail.com>
    gowridurgad and gowridurgad authored May 28, 2026
    Configuration menu
    Copy the full SHA
    0355742 View commit details
    Browse the repository at this point in the history

Commits on Jun 9, 2026

  1. Only use mirrorToken in getManifest if it's provided (#1548)

    * Only use `mirrorToken` in `getManifest` if it's provided
    
    Signed-off-by: Timo Sand <timo.sand@f-secure.com>
    
    * `npm run build`
    
    Signed-off-by: Timo Sand <timo.sand@f-secure.com>
    
    ---------
    
    Signed-off-by: Timo Sand <timo.sand@f-secure.com>
    deiga authored Jun 9, 2026
    Configuration menu
    Copy the full SHA
    f4a67bb View commit details
    Browse the repository at this point in the history

Commits on Jun 18, 2026

  1. Configuration menu
    Copy the full SHA
    4f8aac5 View commit details
    Browse the repository at this point in the history
  2. Strict equality

    jasongin committed Jun 18, 2026
    Configuration menu
    Copy the full SHA
    360237f View commit details
    Browse the repository at this point in the history
  3. Update dist

    jasongin committed Jun 18, 2026
    Configuration menu
    Copy the full SHA
    4e1a87a View commit details
    Browse the repository at this point in the history

Commits on Jun 19, 2026

  1. Configuration menu
    Copy the full SHA
    30eb73b View commit details
    Browse the repository at this point in the history

Commits on Jun 23, 2026

  1. Merge pull request #1569 from jasongin/update-actions-cache-5.1.0

    Bump @actions/cache to 5.1.0, log cache write denied
    Link- authored Jun 23, 2026
    Configuration menu
    Copy the full SHA
    6a61c03 View commit details
    Browse the repository at this point in the history

Commits on Jul 2, 2026

  1. docs: Update caching recommendations to mitigate cache poisoning risks (

    #1567)
    
    * docs: Update caching recommendations to mitigate cache poisoning risks
    
    * docs: Disable automatic npm caching to mitigate cache poisoning risks
    chiranjib-swain authored Jul 2, 2026
    Configuration menu
    Copy the full SHA
    7c2c68d View commit details
    Browse the repository at this point in the history

Commits on Jul 7, 2026

  1. Add cache-primary-key and cache-matched-key as outputs (#1577)

    * Add cache-primary-key and cache-matched-key as outputs
    
    * Refine cache output descriptions
    
    ---------
    
    Co-authored-by: gowridurgad <gowridurgad@gmail.com>
    gowridurgad and gowridurgad authored Jul 7, 2026
    Configuration menu
    Copy the full SHA
    04be95c View commit details
    Browse the repository at this point in the history

Commits on Jul 14, 2026

  1. Migrate to ESM and upgrade dependencies (#1574)

    * Migrate to ESM
    
    * updated package.json version
    
    * Update README for v6 and clean up dev dependencies
    
    * Remove unused ts-node
    
    * fix audit issue
    
    ---------
    
    Co-authored-by: gowridurgad <gowridurgad@gmail.com>
    gowridurgad and gowridurgad authored Jul 14, 2026
    Configuration menu
    Copy the full SHA
    8207627 View commit details
    Browse the repository at this point in the history
  2. Add Node version validation and manifest fetch retry (#1580)

    * Add Node version validation and manifest fetch retry
    
    * Add debug logs for expected and actual Node versions
    
    * chore: rebuild dist
    
    * refactor: enhance debug logging for Node installation failure
    
    * update test cases
    
    * Improve formatting of test cases
    
    * revert package-lock.json
    v-jitenderpalsingh authored Jul 14, 2026
    Configuration menu
    Copy the full SHA
    363be39 View commit details
    Browse the repository at this point in the history

Commits on Jul 16, 2026

  1. chore(deps): bump @actions/cache to 6.2.0 (#1584)

    Bump @actions/cache from ^6.1.0 to ^6.2.0 and rebuild the vendored dist
    bundles (dist/setup, dist/cache-save) via ncc. Update the licensed cache
    record for @actions/cache to 6.2.0.
    
    6.2.0 ships two transparent client behaviors: honor ACTIONS_CACHE_MODE to
    skip restore/save when the effective cache-mode disallows it, and surface a
    core.warning (not a run failure) when the cache service denies a read/write
    due to token scopes.
    
    
    Copilot-Session: 0acd1380-0102-4f9d-b613-192a6ddef737
    
    Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
    philip-gai and Copilot authored Jul 16, 2026
    Configuration menu
    Copy the full SHA
    391b8c7 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    05e62e6 View commit details
    Browse the repository at this point in the history
  3. Update workflow pins and migrate Node matrices to modern versions (#1583

    )
    
    * Update workflow action pins and move Node 20 to 26
    
    * fix: correct node version in v8-canary and update setup for node 22 x86
    
    * chore: update setup-node action version from v6 to v7 in documentation
    
    * fix: update pnpm/action-setup version to v6 in advanced usage documentation
    HarithaVattikuti authored Jul 16, 2026
    Configuration menu
    Copy the full SHA
    1b7c366 View commit details
    Browse the repository at this point in the history

Commits on Jul 17, 2026

  1. README.md: bump actions/checkout to latest version 7 (#1578)

    Co-authored-by: Haritha <73516759+HarithaVattikuti@users.noreply.github.com>
    deining and HarithaVattikuti authored Jul 17, 2026
    Configuration menu
    Copy the full SHA
    b789df3 View commit details
    Browse the repository at this point in the history

Commits on Jul 21, 2026

  1. docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change (#1593)

    Co-authored-by: gowridurgad <gowridurgad@gmail.com>
    gowridurgad and gowridurgad authored Jul 21, 2026
    Configuration menu
    Copy the full SHA
    32f57ac View commit details
    Browse the repository at this point in the history
Loading