From d7f62fb8db18bf750daf196ba1a372a285dcbd00 Mon Sep 17 00:00:00 2001 From: Mehmet Cevheri BOZOGLAN Date: Wed, 29 Jul 2026 14:35:15 +0300 Subject: [PATCH] Revert "Revert "chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0" (#75)" This reverts commit 16cd23f5625fdc6a90df36601c37b6cd2c14c484. --- .github/workflows/ci.yml | 2 +- .github/workflows/publish.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6abd495..762b7d6 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -77,7 +77,7 @@ jobs: - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version-file: .bun-version - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: "22" - run: bun install --frozen-lockfile diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 9345d08..e0817d5 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -55,7 +55,7 @@ jobs: # setup-node writes ~/.npmrc with the registry + a NODE_AUTH_TOKEN # placeholder - the canonical, injection-safe way to authenticate npm # publish in CI (the token is never interpolated into a shell command). - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: "22" registry-url: "https://registry.npmjs.org" @@ -93,7 +93,7 @@ jobs: # `bunx jsr`, which can resolve `jsr` to the repo-root jsr.json on some Bun # versions ("Cannot run jsr.json"). JSR publishes from source and runs its # own slow-types check; no build or dependency install is needed. - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: "22" # Pinned: an unpinned `jsr@latest` would hand the publish-capable OIDC