chore(deps): update actions/setup-node action to v6.5.0 by renovate[bot] · Pull Request #26 · wave-av/wave-modules

renovate · 2026-07-16T03:54:54Z

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	minor	`v6.4.0` → `v6.5.0`

Release Notes

actions/setup-node (actions/setup-node)

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

changeset-bot · 2026-07-16T03:55:00Z

⚠️ No Changeset found

Latest commit: ca2f4c4

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

cursor

Risk: low. Approved: Cursor Bugbot was not present on this PR, so that signal was skipped; the change is a single pinned actions/setup-node bump (v6.4.0 → v6.5.0) in CI with no applicable approval policies. No reviewers assigned.

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}

greptile-apps · 2026-08-14T16:34:47Z

PR author is in the excluded authors list.

devin-ai-integration

Devin Review found 1 potential issue.

devin-ai-integration · 2026-08-14T16:35:13Z

          fetch-depth: 0
          persist-credentials: false
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0


🔍 Action pin SHA should be verified against the tagged release

This is a single-line dependency pin bump for actions/setup-node from v6.4.0 to v6.5.0. The workflow keeps the SHA-pinned + comment convention used elsewhere in .github/workflows, and this is the only setup-node usage in the repo, so the bump is complete. The only thing that cannot be confirmed from the repo alone is whether the commit SHA 249970729cb0ef3589644e2896645e5dc5ba9c38 actually corresponds to the v6.5.0 tag; if it does not, the workflow would fail to resolve the action and the required enforce check would break.

Was this helpful? React with 👍 or 👎 to provide feedback.

macroscopeapp · 2026-08-14T16:37:19Z

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This is a one-line, CI-only update to a pinned setup-node action and does not change product runtime behavior. The workflow is an explicitly owner-controlled governance surface, and the new upstream SHA/tag pairing still needs confirmation.

Not approved because:

Credit balance exhausted. Approvability relies on correctness review in order to determine eligibility

No code changes detected at ad24aca. Prior analysis still applies.

^{Review your spending limits in Billing settings. You can add or adjust custom eligibility rules. Learn more.}

codeant-ai · 2026-08-24T03:24:33Z

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

codeant-ai · 2026-08-27T00:42:19Z