build(deps): bump actions/setup-node from 4 to 5 (#5954)

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-node/releases">actions/setup-node's releases</a>.</em></p> <blockquote> <h2>v5.0.0</h2> <h2>What's Changed</h2> <h3>Breaking Changes</h3> <ul> <li>Enhance caching in setup-node with automatic package manager detection by <a href="https://github.com/priya-kinthali"><code>@priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1348">actions/setup-node#1348</a></li> </ul> <p>This update, introduces automatic caching when a valid <code>packageManager</code> field is present in your <code>package.json</code>. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set <code>package-manager-cache: false</code></p> <pre lang="yaml"><code>steps: - uses: actions/checkout@v5 - uses: actions/setup-node@v5 with: package-manager-cache: false </code></pre> <ul> <li>Upgrade action to use node24 by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1325">actions/setup-node#1325</a></li> </ul> <p>Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. <a href="https://github.com/actions/runner/releases/tag/v2.327.1">See Release Notes</a></p> <h3>Dependency Upgrades</h3> <ul> <li>Upgrade <code>@octokit/request-error</code> and <code>@actions/github</code> by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-node/pull/1227">actions/setup-node#1227</a></li> <li>Upgrade uuid from 9.0.1 to 11.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-node/pull/1273">actions/setup-node#1273</a></li> <li>Upgrade undici from 5.28.5 to 5.29.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-node/pull/1295">actions/setup-node#1295</a></li> <li>Upgrade form-data to bring in fix for critical vulnerability by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1332">actions/setup-node#1332</a></li> <li>Upgrade actions/checkout from 4 to 5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-node/pull/1345">actions/setup-node#1345</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/priya-kinthali"><code>@priya-kinthali</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1348">actions/setup-node#1348</a></li> <li><a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1325">actions/setup-node#1325</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v4...v5.0.0">https://github.com/actions/setup-node/compare/v4...v5.0.0</a></p> <h2>v4.4.0</h2> <h2>What's Changed</h2> <h3>Bug fixes:</h3> <ul> <li>Make eslint-compact matcher compatible with Stylelint by <a href="https://github.com/FloEdelmann"><code>@FloEdelmann</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/98">actions/setup-node#98</a></li> <li>Add support for indented eslint output by <a href="https://github.com/fregante"><code>@fregante</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1245">actions/setup-node#1245</a></li> </ul> <h3>Enhancement:</h3> <ul> <li>Support private mirrors by <a href="https://github.com/marco-ippolito"><code>@marco-ippolito</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1240">actions/setup-node#1240</a></li> </ul> <h3>Dependency update:</h3> <ul> <li>Upgrade <code>@action/cache</code> from 4.0.2 to 4.0.3 by <a href="https://github.com/aparnajyothi-y"><code>@aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1262">actions/setup-node#1262</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/FloEdelmann"><code>@FloEdelmann</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/98">actions/setup-node#98</a></li> <li><a href="https://github.com/fregante"><code>@fregante</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1245">actions/setup-node#1245</a></li> <li><a href="https://github.com/marco-ippolito"><code>@marco-ippolito</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1240">actions/setup-node#1240</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v4...v4.4.0">https://github.com/actions/setup-node/compare/v4...v4.4.0</a></p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="a0853c2454"><code>a0853c2</code></a> Bump actions/checkout from 4 to 5 (<a href="https://redirect.github.com/actions/setup-node/issues/1345">#1345</a>)</li> <li><a href="b7234cc9fe"><code>b7234cc</code></a> Upgrade action to use node24 (<a href="https://redirect.github.com/actions/setup-node/issues/1325">#1325</a>)</li> <li><a href="d7a11313b5"><code>d7a1131</code></a> Enhance caching in setup-node with automatic package manager detection (<a href="https://redirect.github.com/actions/setup-node/issues/1348">#1348</a>)</li> <li><a href="5e2628c959"><code>5e2628c</code></a> Bumps form-data (<a href="https://redirect.github.com/actions/setup-node/issues/1332">#1332</a>)</li> <li><a href="65beceff8e"><code>65becef</code></a> Bump undici from 5.28.5 to 5.29.0 (<a href="https://redirect.github.com/actions/setup-node/issues/1295">#1295</a>)</li> <li><a href="7e24a656e1"><code>7e24a65</code></a> Bump uuid from 9.0.1 to 11.1.0 (<a href="https://redirect.github.com/actions/setup-node/issues/1273">#1273</a>)</li> <li><a href="08f58d1471"><code>08f58d1</code></a> Bump <code>@octokit/request-error</code> and <code>@actions/github</code> (<a href="https://redirect.github.com/actions/setup-node/issues/1227">#1227</a>)</li> <li>See full diff in <a href="https://github.com/actions/setup-node/compare/v4...v5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-node&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> by @mifi: See also https://github.com/actions/setup-node/issues/614 .npmrc was added in 9ddd4d907e but it's not entirely clear to why, so that's why I added the `rm -f` calls instead. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com> Co-authored-by: mifi <402547+mifi@users.noreply.github.com> Co-authored-by: Mikael Finstad <finstaden@gmail.com>
2026-07-17 16:50:22 +00:00 · 2025-09-22 14:45:48 +02:00 · 2025-09-22 14:45:48 +02:00 · cff651527a
commit cff651527a
parent 944310dc67
7 changed files with 31 additions and 10 deletions
--- a/.github/workflows/bundlers.yml
+++ b/.github/workflows/bundlers.yml
@ -22,6 +22,8 @@ jobs:
  isolate_uppy:
    name: Isolate Uppy packages
    runs-on: ubuntu-latest
+    env:
+      SKIP_YARN_COREPACK_CHECK: true
    steps:
      - name: Checkout sources
        uses: actions/checkout@v5
@ -37,7 +39,7 @@ jobs:
          restore-keys: |
            ${{ runner.os }}-yarn-
      - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
        with:
          node-version: lts/*
      - name: Install dependencies
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@ -23,6 +23,8 @@ jobs:
  unit_tests:
    name: Tests
    runs-on: ubuntu-latest
+    env:
+      SKIP_YARN_COREPACK_CHECK: true
    strategy:
      matrix:
        node-version: [lts/*]
@ -42,7 +44,7 @@ jobs:
          restore-keys: |
            ${{ runner.os }}-yarn-
      - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
        with:
          node-version: ${{matrix.node-version}}
      - name: Install dependencies
@ -63,6 +65,8 @@ jobs:
  types:
    name: Types
    runs-on: ubuntu-latest
+    env:
+      SKIP_YARN_COREPACK_CHECK: true
    steps:
      - name: Checkout sources
        uses: actions/checkout@v5
@ -79,7 +83,7 @@ jobs:
          restore-keys: |
            ${{ runner.os }}-yarn-
      - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
        with:
          node-version: lts/*
      - name: Install dependencies
@ -97,7 +101,7 @@ jobs:
        uses: actions/checkout@v5

      - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
        with:
          node-version: lts/*
      - name: Install dependencies
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@ -32,6 +32,7 @@ jobs:
    runs-on: ubuntu-latest
    env:
      DIFF_BUILDER: true
+      SKIP_YARN_COREPACK_CHECK: true
    outputs:
      diff: ${{ steps.diff.outputs.OUTPUT_DIFF }}
    steps:
@ -54,7 +55,7 @@ jobs:
          restore-keys: |
            ${{ runner.os }}-yarn-
      - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
        with:
          node-version: lts/*
      - run: corepack yarn install
--- a/.github/workflows/lockfile_check.yml
+++ b/.github/workflows/lockfile_check.yml
@ -18,6 +18,8 @@ jobs:
  lint_lockfile:
    name: Lint yarn.lock
    runs-on: ubuntu-latest
+    env:
+      SKIP_YARN_COREPACK_CHECK: true
    steps:
      - name: Checkout sources
        uses: actions/checkout@v5
@ -34,7 +36,7 @@ jobs:
          restore-keys: |
            ${{ runner.os }}-yarn-
      - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
        with:
          node-version: lts/*
      - name: Install dependencies
--- a/.github/workflows/manual-cdn.yml
+++ b/.github/workflows/manual-cdn.yml
@ -23,6 +23,8 @@ env:
 jobs:
  upload:
    runs-on: ubuntu-latest
+    env:
+      SKIP_YARN_COREPACK_CHECK: true
    steps:
      - name: Checkout sources
        uses: actions/checkout@v5
@ -39,7 +41,7 @@ jobs:
          restore-keys: |
            ${{ runner.os }}-yarn-
      - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
        with:
          node-version: lts/*
      - name: Install upload-to-cdn dependencies
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@ -11,6 +11,8 @@ jobs:
  release:
    name: Release
    runs-on: ubuntu-latest
+    env:
+      SKIP_YARN_COREPACK_CHECK: true
    outputs:
      companionWasReleased: ${{ steps.checkIfCompanionWasReleased.outputs.version }}
      published: ${{ steps.changesets.outputs.published }}
@ -21,7 +23,7 @@ jobs:
          fetch-depth: 2

      - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
        with:
          node-version: lts/*

@ -38,10 +40,15 @@ jobs:
      - name: '@uppy/angular prepublish'
        run: corepack yarn workspace @uppy/angular prepublishOnly

-      - run: |
+      - name: Add npm token to yarnrc
+        run: |
          echo '' >> .yarnrc.yml
          echo 'npmAuthToken: "${NPM_TOKEN}"' >> .yarnrc.yml

+      - name: Add npm token to npmrc
+        run: |
+          echo '//registry.npmjs.org/:_authToken=${NPM_TOKEN}' > .npmrc
+
      - name: Create Release Pull Request or Publish
        id: changesets
        uses: changesets/action@v1
@ -58,6 +65,10 @@ jobs:
        run: |
          sed -i '/npmAuthToken:/d' .yarnrc.yml

+      - name: Remove npmrc
+        run: |
+          rm .npmrc
+
      - name: Check if Companion was released
        id: checkIfCompanionWasReleased
        if: steps.changesets.outputs.published == 'true'