chore(deps): update actions/setup-node action to v6 (#953)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-node](https://redirect.github.com/actions/setup-node) |
action | major | `v4.4.0` → `v6.3.0` |
---
### Release Notes
<details>
<summary>actions/setup-node (actions/setup-node)</summary>
###
[`v6.3.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.3.0)
[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v6.2.0...v6.3.0)
#### What's Changed
##### Enhancements:
- Support parsing `devEngines` field by
[@​susnux](https://redirect.github.com/susnux) in
[#​1283](https://redirect.github.com/actions/setup-node/pull/1283)
> When using node-version-file: package.json, setup-node now
prefers devEngines.runtime over engines.node.
##### Dependency updates:
- Fix npm audit issues by
[@​gowridurgad](https://redirect.github.com/gowridurgad) in
[#​1491](https://redirect.github.com/actions/setup-node/pull/1491)
- Replace uuid with crypto.randomUUID() by
[@​trivikr](https://redirect.github.com/trivikr) in
[#​1378](https://redirect.github.com/actions/setup-node/pull/1378)
- Upgrade minimatch from 3.1.2 to 3.1.5 by
[@​dependabot](https://redirect.github.com/dependabot) in
[#​1498](https://redirect.github.com/actions/setup-node/pull/1498)
##### Bug fixes:
- Remove hardcoded bearer for mirror-url
[@​marco-ippolito](https://redirect.github.com/marco-ippolito) in
[#​1467](https://redirect.github.com/actions/setup-node/pull/1467)
- Scope test lockfiles by package manager and update cache tests by
[@​gowridurgad](https://redirect.github.com/gowridurgad) in
[#​1495](https://redirect.github.com/actions/setup-node/pull/1495)
#### New Contributors
- [@​susnux](https://redirect.github.com/susnux) made their first
contribution in
[#​1283](https://redirect.github.com/actions/setup-node/pull/1283)
**Full Changelog**:
<https://github.com/actions/setup-node/compare/v6...v6.3.0>
###
[`v6.2.0`](https://redirect.github.com/actions/setup-node/compare/v6.1.0...v6.2.0)
[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v6.1.0...v6.2.0)
###
[`v6.1.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.1.0)
[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v6...v6.1.0)
#### What's Changed
##### Enhancement:
- Remove always-auth configuration handling by
[@​priyagupta108](https://redirect.github.com/priyagupta108) in
[#​1436](https://redirect.github.com/actions/setup-node/pull/1436)
##### Dependency updates:
- Upgrade
[@​actions/cache](https://redirect.github.com/actions/cache) from
4.0.3 to 4.1.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1384](https://redirect.github.com/actions/setup-node/pull/1384)
- Upgrade actions/checkout from 5 to 6 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1439](https://redirect.github.com/actions/setup-node/pull/1439)
- Upgrade js-yaml from 3.14.1 to 3.14.2 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1435](https://redirect.github.com/actions/setup-node/pull/1435)
##### Documentation update:
- Add example for restore-only cache in documentation by
[@​aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in
[#​1419](https://redirect.github.com/actions/setup-node/pull/1419)
**Full Changelog**:
<https://github.com/actions/setup-node/compare/v6...v6.1.0>
###
[`v6.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.0.0)
[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v5.0.0...v6)
##### What's Changed
**Breaking Changes**
- Limit automatic caching to npm, update workflows and documentation by
[@​priyagupta108](https://redirect.github.com/priyagupta108) in
[#​1374](https://redirect.github.com/actions/setup-node/pull/1374)
**Dependency Upgrades**
- Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in
v5 by [@​dependabot](https://redirect.github.com/dependabot)\[bot]
in
[#​1336](https://redirect.github.com/actions/setup-node/pull/1336)
- Upgrade prettier from 2.8.8 to 3.6.2 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1334](https://redirect.github.com/actions/setup-node/pull/1334)
- Upgrade actions/publish-action from 0.3.0 to 0.4.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1362](https://redirect.github.com/actions/setup-node/pull/1362)
**Full Changelog**:
<https://github.com/actions/setup-node/compare/v5...v6.0.0>
###
[`v5.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v5.0.0)
[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v4.4.0...v5.0.0)
##### What's Changed
##### Breaking Changes
- Enhance caching in setup-node with automatic package manager detection
by [@​priya-kinthali](https://redirect.github.com/priya-kinthali)
in
[#​1348](https://redirect.github.com/actions/setup-node/pull/1348)
This update, introduces automatic caching when a valid `packageManager`
field is present in your `package.json`. This aims to improve workflow
performance and make dependency management more seamless.
To disable this automatic caching, set `package-manager-cache: false`
```yaml
steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
with:
package-manager-cache: false
```
- Upgrade action to use node24 by
[@​salmanmkc](https://redirect.github.com/salmanmkc) in
[#​1325](https://redirect.github.com/actions/setup-node/pull/1325)
Make sure your runner is on version v2.327.1 or later to ensure
compatibility with this release. [See Release
Notes](https://redirect.github.com/actions/runner/releases/tag/v2.327.1)
##### Dependency Upgrades
- Upgrade
[@​octokit/request-error](https://redirect.github.com/octokit/request-error)
and [@​actions/github](https://redirect.github.com/actions/github)
by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1227](https://redirect.github.com/actions/setup-node/pull/1227)
- Upgrade uuid from 9.0.1 to 11.1.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1273](https://redirect.github.com/actions/setup-node/pull/1273)
- Upgrade undici from 5.28.5 to 5.29.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1295](https://redirect.github.com/actions/setup-node/pull/1295)
- Upgrade form-data to bring in fix for critical vulnerability by
[@​gowridurgad](https://redirect.github.com/gowridurgad) in
[#​1332](https://redirect.github.com/actions/setup-node/pull/1332)
- Upgrade actions/checkout from 4 to 5 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1345](https://redirect.github.com/actions/setup-node/pull/1345)
##### New Contributors
- [@​priya-kinthali](https://redirect.github.com/priya-kinthali)
made their first contribution in
[#​1348](https://redirect.github.com/actions/setup-node/pull/1348)
- [@​salmanmkc](https://redirect.github.com/salmanmkc) made their
first contribution in
[#​1325](https://redirect.github.com/actions/setup-node/pull/1325)
**Full Changelog**:
<https://github.com/actions/setup-node/compare/v4...v5.0.0>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/xmldom/xmldom).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNDMuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> R
renovate[bot] committed
2a9ca1359cdc90d790766313f61fb808f3cfd60d
Parent: 36c4f42
Committed by GitHub <noreply@github.com>
on 4/18/2026, 3:38:30 PM