#2300 chore(deps): bump the github-actions group with 2 updates Pull request opened by dependabot[bot] Bumps the github-actions group with 2 updates: actions/setup-node and zizmorcore/zizmor-action. Updates

actions/setup-node

from 6.4.0 to 7.0.0 Release notes Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

• Add cache-primary-key and cache-matched-key as outputs by `@​gowridurgad` in actions/setup-node#1577

• Migrate to ESM and upgrade dependencies by `@​gowridurgad` in actions/setup-node#1574

Bug fixes:

• Remove dummy NODE_AUTH_TOKEN export by `@​gowridurgad` in actions/setup-node#1558

• Only use

mirrorToken

in

getManifest

if it's provided by `@​deiga` in actions/setup-node#1548

Documentation updates:

• Add documentation for publishing to npm with Trusted Publisher (OIDC) by `@​chiranjib-swain` in actions/setup-node#1536

• docs: Update restore-only cache documentation by `@​priya-kinthali` in actions/setup-node#1550

• docs: Update caching recommendations to mitigate cache poisoning risks by `@​chiranjib-swain` in actions/setup-node#1567

Dependency update:

• Upgrade

@​actions/cache

to 5.1.0, log cache write denied by `@​jasongin` in actions/setup-node#1569

New Contributors

• `@​chiranjib-swain` made their first contribution in actions/setup-node#1536

• `@​deiga` made their first contribution in actions/setup-node#1548

• `@​jasongin` made their first contribution in actions/setup-node#1569

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

• Update

@​actions/cache

to 5.1.0 and add security overrides for undici and fast-xml-parser by `@​HarithaVattikuti` in actions/setup-node#1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

Commits • `8207627` Migrate to ESM and upgrade dependencies (#1574) • `04be95c` Add cache-primary-key and cache-matched-key as outputs (#1577) • `7c2c68d` docs: Update caching recommendations to mitigate cache poisoning risks (#1567) • `6a61c03` Merge pull request #1569 from jasongin/update-actions-cache-5.1.0 • `30eb73b` Resolve high-severity audit issues • `4e1a87a` Update dist • `360237f` Strict equality • `4f8aac5` Bump

@​actions/cache

to 5.1.0, log cache write denied • `f4a67bb` Only use

mirrorToken

in

getManifest

if it's provided (#1548) • `0355742` Remove dummy NODE_AUTH_TOKEN export (#1558) • Additional commits viewable in compare view Updates

zizmorcore/zizmor-action

from 0.5.7 to 0.6.0 Release notes Sourced from zizmorcore/zizmor-action's releases.

v0.6.0

zizmor 1.27.0 is now the default version used by the action.

What's Changed

• Fold Docker image pull output into a collapsed Actions log group by `@​woodruffw` with `@​Copilot` in zizmorcore/zizmor-action#132

• Readme: document missing inputs by `@​staabm` in zizmorcore/zizmor-action#130

• ci: block version sync workflow on forks by `@​shaanmajid` in zizmorcore/zizmor-action#129

• Sync zizmor versions by `@​github-actions`[bot] in zizmorcore/zizmor-action#137

• Add

collect

input by `@​woodruffw` in zizmorcore/zizmor-action#139

New Contributors

• `@​woodruffw` with `@​Copilot` made their first contribution in zizmorcore/zizmor-action#132

• `@​staabm` made their first contribution in zizmorcore/zizmor-action#130

• `@​shaanmajid` made their first contribution in zizmorcore/zizmor-action#129

Full Changelog: zizmorcore/zizmor-action@v0.5.7...v0.6.0

Commits • `6599ee8` Add

collect

input (#139) • `bec05c8` Sync zizmor versions (#137) • `cf59549` Add issue templates (#135) • `f72bf17` chore(… meltano/hub