[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	major	v6.4.0 → v7.1.0
aws-actions/configure-aws-credentials	action	major	v4.3.1 → v6.3.0

---

Release Notes

actions/setup-node

v7.1.0

Compare Source

What's Changed

Enhancements:

• Add support for mise.toml file by @​gperdomor in #​1421
• Support absolute paths in node-version-file by @​v-mahabaleshwars in #​1633

Bug fixes:

• Add Node version validation and manifest fetch retry by @​v-jitenderpalsingh in #​1580

Documentation updates:

• README.md: bump actions/checkout to latest version 7 by @​deining in #​1578
• docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @​v-gowridurgad in #​1593
• Fixed cache recommendation syntax by @​SubJunk in #​1603

Dependency updates:

• Update workflow pins and migrate Node matrices to modern versions by @​v-HarithaVattikuti in #​1583
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in #​1584
• Pin @​types/node to v24 by @​v-priyagupta108 in #​1585
• Override brace-expansion to 5.0.8 by @​v-priyagupta108 with @​Copilot in #​1599
• Upgrade actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in #​1598
• Upgrade prettier from 3.8.4 to 3.9.6 by @​dependabot in #​1590
• Upgrade @​vercel/ncc from 0.44.0 to 0.45.0 by @​dependabot in #​1610
• Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @​dependabot in #​1602
• Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @​dependabot in #​1629
• Upgrade @​types/semver from 7.7.1 to 7.8.0 by @​dependabot in #​1616
• Upgrade @​typescript-eslint/parser from 8.62.0 to 8.70.0 by @​dependabot in #​1615
• Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @​dependabot in #​1631
• Upgrade jest-each from 30.4.1 to 30.5.2 by @​dependabot in #​1636
• Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @​dependabot in #​1638
• Update dependencies and add license files by @​v-HarithaVattikuti in #​1642
• Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @​dependabot in #​1635

New Contributors

• @​v-jitenderpalsingh made their first contribution in #​1580
• @​philip-gai made their first contribution in #​1584
• @​gperdomor made their first contribution in #​1421
• @​SubJunk made their first contribution in #​1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

v7.0.0

Compare Source

What's Changed

Enhancements:

• Add cache-primary-key and cache-matched-key as outputs by @​gowridurgad in #​1577
• Migrate to ESM and upgrade dependencies by @​gowridurgad in #​1574

Bug fixes:

• Remove dummy NODE_AUTH_TOKEN export by @​gowridurgad in #​1558
• Only use mirrorToken in getManifest if it's provided by @​deiga in #​1548

Documentation updates:

• Add documentation for publishing to npm with Trusted Publisher (OIDC) by @​chiranjib-swain in #​1536
• docs: Update restore-only cache documentation by @​priya-kinthali in #​1550
• docs: Update caching recommendations to mitigate cache poisoning risks by @​chiranjib-swain in #​1567

Dependency update:

• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in #​1569

New Contributors

• @​chiranjib-swain made their first contribution in #​1536
• @​deiga made their first contribution in #​1548
• @​jasongin made their first contribution in #​1569

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

Compare Source

What's Changed

• Update @​actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @​HarithaVattikuti in #​1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

aws-actions/configure-aws-credentials

v6.3.0

Compare Source

Features

• add translate-env-variables option (#​1961) (57b8365)

v6.2.4

Compare Source

Bug Fixes

• account-ids handling, mask proxy as secret in logs (#​1943) (aa65264)
• skip backoff sleep after the final retryAndBackoff attempt (#​1937) (3852440)

v6.2.3

Compare Source

Bug Fixes

• attach git credentials before Tag Major Version push (#​1877) (9ae780b)
• PackedPolicyTooLarge detection in STS tags (#​1899) (fa8d6a5)

v6.2.2

Compare Source

Miscellaneous Chores

• release 6.2.2 (d01d678)

v6.2.1

Compare Source

Bug Fixes

• enforce allowed-account-ids on all auth paths (#​1847) (4d281fb)

v6.2.0

Compare Source

Features

• add additional session tags by default (#​1775) (e0ba768)
• add more retry logic and better logging (#​1764) (540d0c1)
• add regex validation to role-session-name (#​1765) (e354499)
• Allow custom session tags to be passed when assuming a role (#​1759) (61f50f6)
• expose run id in STS client user-agent (#​1774) (29d1be3)
• support custom STS endpoints (#​1762) (8d52d05)

Bug Fixes

• skip credential check on output-env-credentials: false (#​1778) (58e7c47)
• assumeRole failing from session tag size too large (#​1808) (d6f5dc3)

v6.1.3

Compare Source

Bug Fixes

• fix: allow kubelet token symlink in #​1805

v6.1.2

Compare Source

Bug Fixes

• additional filesystem checks (#​1799) (c39f282)

v6.1.1

Compare Source

What's Changed

• chore(deps-dev): bump esbuild from 0.27.4 to 0.28.0 by @​dependabot[bot] in #​1722
• chore(deps-dev): bump @​types/node from 25.5.0 to 25.5.2 by @​dependabot[bot] in #​1723
• chore(deps-dev): bump @​smithy/property-provider from 4.2.12 to 4.2.13 by @​dependabot[bot] in #​1724
• chore(deps): bump proxy-agent from 8.0.0 to 8.0.1 by @​dependabot[bot] in #​1726
• chore(deps): bump @​smithy/node-http-handler from 4.5.1 to 4.5.2 by @​dependabot[bot] in #​1725
• chore(deps): bump @​aws-sdk/client-sts from 3.1020.0 to 3.1025.0 by @​dependabot[bot] in #​1727
• chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 by @​dependabot[bot] in #​1728
• chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 by @​dependabot[bot] in #​1729
• chore(deps-dev): bump @​types/node from 25.5.2 to 25.6.0 by @​dependabot[bot] in #​1730
• chore(deps-dev): bump @​aws-sdk/credential-provider-env from 3.972.24 to 3.972.25 by @​dependabot[bot] in #​1733
• chore(deps): bump @​aws-sdk/client-sts from 3.1025.0 to 3.1030.0 by @​dependabot[bot] in #​1732
• chore(deps-dev): bump @​biomejs/biome from 2.4.10 to 2.4.11 by @​dependabot[bot] in #​1734
• chore(deps): bump basic-ftp from 5.2.2 to 5.3.0 by @​dependabot[bot] in #​1736
• chore(deps-dev): bump memfs from 4.57.1 to 4.57.2 by @​dependabot[bot] in #​1737
• chore(deps-dev): bump typescript from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​1740
• chore(deps-dev): bump @​smithy/property-provider from 4.2.13 to 4.2.14 by @​dependabot[bot] in #​1741
• chore(deps-dev): bump @​aws-sdk/credential-provider-env from 3.972.25 to 3.972.28 by @​dependabot[bot] in #​1742
• chore(deps): bump @​aws-sdk/client-sts from 3.1030.0 to 3.1033.0 by @​dependabot[bot] in #​1743
• chore(deps-dev): bump @​biomejs/biome from 2.4.11 to 2.4.12 by @​dependabot[bot] in #​1739
• chore(deps-dev): bump @​biomejs/biome from 2.4.12 to 2.4.13 by @​dependabot[bot] in #​1747
• chore(deps): bump postcss from 8.5.6 to 8.5.12 by @​dependabot[bot] in #​1752
• chore(deps): bump @​smithy/node-http-handler from 4.6.0 to 4.6.1 by @​dependabot[bot] in #​1750
• chore(deps-dev): bump @​aws-sdk/credential-provider-env from 3.972.28 to 3.972.32 by @​dependabot[bot] in #​1751
• chore(deps): bump @​aws-sdk/client-sts from 3.1033.0 to 3.1038.0 by @​dependabot[bot] in #​1749
• chore: release 6.1.1 by @​lehmanmj in #​1757

Full Changelog: aws-actions/configure-aws-credentials@v6...v6.1.1

v6.1.0

Compare Source

Features

• add skip cleanup option (#​1716) (11b1c58), closes #​1545
• Support usage of AWS Profiles (#​1696) (a7f0c82)

v6.0.0

Compare Source

⚠ BREAKING CHANGES

• Update action to use node24 Note this requires GitHub action runner version v2.327.1 or later (#​1632) (a7a2c11)

Features

• add support to define transitive tag keys (#​1316) (232435c) (930ebd9)

Bug Fixes

• properly output aws-account-id and authenticated-arn when using role-chaining (#​1633) (7ceaf96)

v5.1.1

Compare Source

Miscellaneous Chores

• release 5.1.1 (56d6a58)
• various dependency updates

v5.1.0

Compare Source

Features

• Add global timeout support (#​1487) (1584b8b)
• add no-proxy support (#​1482) (dde9b22)
• Improve debug logging in retry logic (#​1485) (97ef425)

Bug Fixes

• properly expose getProxyForUrl (introduced in #​1482) (#​1486) (cea4298)

v5.0.0

Compare Source

⚠ BREAKING CHANGES

• Cleanup input handling. Changes invalid boolean input behavior (see #​1445)

Features

• add skip OIDC option (#​1458) (8c45f6b)
• Cleanup input handling. Changes invalid boolean input behavior (see #​1445) (74b3e27)
• support account id allowlist (#​1456) (c4be498)

---

Configuration

📅 Schedule: (in timezone Europe/Warsaw)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.