From 8ce369d6b0fcbc3f94f285bf5300a0f02f806575 Mon Sep 17 00:00:00 2001
From: pmckinney-codat
Date: Mon, 17 Aug 2026 12:12:14 +0100
Subject: [PATCH] Bump actions/setup-node from 6 to 7
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Recreates dependabot PR #1876 on an in-repo branch.
Dependabot-triggered runs resolve secrets from the Dependabot secret
store rather than the Actions store, so secrets.ADO_NPM_FEED_TOKEN came
through empty and every job running `npm ci` failed with npm E401. The
repo .npmrc points `registry=` at the codat-npm ADO feed, so a missing
credential breaks the whole install, not just @codat/sdk-link-types.
setup-node@v7 itself is fine — it ran green on the dependabot branch;
only the subsequent install step failed.
Co-Authored-By: Claude Opus 5
---
.github/workflows/check-formatting.yml | 2 +-
.github/workflows/check-markdown-lint.yml | 2 +-
.github/workflows/check-spelling.yml | 2 +-
.github/workflows/pr.yml | 4 ++--
4 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/.github/workflows/check-formatting.yml b/.github/workflows/check-formatting.yml
index 2a83772bcb..0f9986a29a 100644
--- a/.github/workflows/check-formatting.yml
+++ b/.github/workflows/check-formatting.yml
@@ -13,7 +13,7 @@ jobs:
- uses: actions/checkout@v6
- name: Setup Node.js
- uses: actions/setup-node@v6
+ uses: actions/setup-node@v7
with:
node-version: '20'
cache: 'npm'
diff --git a/.github/workflows/check-markdown-lint.yml b/.github/workflows/check-markdown-lint.yml
index 3ed11e0a79..97760758d9 100644
--- a/.github/workflows/check-markdown-lint.yml
+++ b/.github/workflows/check-markdown-lint.yml
@@ -24,7 +24,7 @@ jobs:
uses: actions/checkout@v6
- name: Set up Node.js
- uses: actions/setup-node@v6
+ uses: actions/setup-node@v7
with:
node-version: '20'
cache: 'npm'
diff --git a/.github/workflows/check-spelling.yml b/.github/workflows/check-spelling.yml
index 22f1d56e18..d4068022e6 100644
--- a/.github/workflows/check-spelling.yml
+++ b/.github/workflows/check-spelling.yml
@@ -13,7 +13,7 @@ jobs:
- uses: actions/checkout@v6
- name: Setup Node.js
- uses: actions/setup-node@v6
+ uses: actions/setup-node@v7
with:
node-version: '20'
cache: 'npm'
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 7d2d3bb6aa..0789cf8edd 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -24,7 +24,7 @@ jobs:
# build ships LFS pointer files instead of the actual binaries
lfs: true
- - uses: actions/setup-node@v6
+ - uses: actions/setup-node@v7
with:
node-version: 24
cache: npm
@@ -144,7 +144,7 @@ jobs:
# the checkout is only needed so the action can push to gh-pages
lfs: ${{ github.event.action != 'closed' }}
- - uses: actions/setup-node@v6
+ - uses: actions/setup-node@v7
if: github.event.action != 'closed'
with:
node-version: 24