chore(deps): bump actions/setup-node from 4 to 5

[dependabot]

Bumps actions/setup-node from 4 to 5.

Release notes

Sourced from actions/setup-node's releases.

v5.0.0

What's Changed

Breaking Changes

• Enhance caching in setup-node with automatic package manager detection by @​priya-kinthali in actions/setup-node#1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false

steps: - uses: actions/checkout@v5 - uses: actions/setup-node@v5 with: package-manager-cache: false

• Upgrade action to use node24 by @​salmanmkc in actions/setup-node#1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

• Upgrade @​octokit/request-error and @​actions/github by @​dependabot[bot] in actions/setup-node#1227
• Upgrade uuid from 9.0.1 to 11.1.0 by @​dependabot[bot] in actions/setup-node#1273
• Upgrade undici from 5.28.5 to 5.29.0 by @​dependabot[bot] in actions/setup-node#1295
• Upgrade form-data to bring in fix for critical vulnerability by @​gowridurgad in actions/setup-node#1332
• Upgrade actions/checkout from 4 to 5 by @​dependabot[bot] in actions/setup-node#1345

New Contributors

• @​priya-kinthali made their first contribution in actions/setup-node#1348
• @​salmanmkc made their first contribution in actions/setup-node#1325

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

What's Changed

Bug fixes:

• Make eslint-compact matcher compatible with Stylelint by @​FloEdelmann in actions/setup-node#98
• Add support for indented eslint output by @​fregante in actions/setup-node#1245

Enhancement:

• Support private mirrors by @​marco-ippolito in actions/setup-node#1240

Dependency update:

• Upgrade @​action/cache from 4.0.2 to 4.0.3 by @​aparnajyothi-y in actions/setup-node#1262

New Contributors

• @​FloEdelmann made their first contribution in actions/setup-node#98
• @​fregante made their first contribution in actions/setup-node#1245
• @​marco-ippolito made their first contribution in actions/setup-node#1240

Full Changelog: actions/setup-node@v4...v4.4.0

... (truncated)

Commits

• a0853c2 Bump actions/checkout from 4 to 5 (#1345)
• b7234cc Upgrade action to use node24 (#1325)
• d7a1131 Enhance caching in setup-node with automatic package manager detection (#1348)
• 5e2628c Bumps form-data (#1332)
• 65becef Bump undici from 5.28.5 to 5.29.0 (#1295)
• 7e24a65 Bump uuid from 9.0.1 to 11.1.0 (#1273)
• 08f58d1 Bump @​octokit/request-error and @​actions/github (#1227)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated CI workflows to use the latest Node setup action, enhancing reliability and future compatibility.
  • Applied upgrades across pull request testing, pre-release builds, tagged releases, and configuration verification workflows.
  • No changes to application behavior, features, or user-facing functionality.

[coderabbitai]

Walkthrough

Updated multiple GitHub Actions workflows to use actions/setup-node@v5 instead of v4, keeping node-version at 20 and leaving all other steps unchanged.

Changes

Cohort / File(s)	Summary
CI workflows .github/workflows/pr-tests.yml, .github/workflows/pre-release-build.yml, .github/workflows/tagged-release.yml, .github/workflows/verify-configs.yml	Bumped actions/setup-node from @v4 to @v5; no other workflow logic or steps changed; node-version: 20 retained.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

I hopped through YAML fields tonight,
Nudged Node from four to five—just right.
Pipelines purr, the carrots build,
Tags and tests all run as willed.
With whiskers twitching, CI’s bright—
A tiny bump, a smoother flight. 🥕✨

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title Check	✅ Passed	The title “chore(deps): bump actions/setup-node from 4 to 5” precisely captures the primary update of upgrading the actions/setup-node GitHub Action from version 4 to 5, follows conventional commit conventions to indicate a dependency maintenance change, and is concise without introducing irrelevant details.
Docstring Coverage	✅ Passed	No functions found in the changes. Docstring coverage check skipped.

✨ Finishing touches

🧪 Generate unit tests

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch dependabot/github_actions/actions/setup-node-5

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 3768a06 and 040097e.

📒 Files selected for processing (4)

• .github/workflows/pr-tests.yml (1 hunks)
• .github/workflows/pre-release-build.yml (1 hunks)
• .github/workflows/tagged-release.yml (1 hunks)
• .github/workflows/verify-configs.yml (1 hunks)

🔇 Additional comments (1)

.github/workflows/verify-configs.yml (1)

13-15: Verify setup-node@v5 caching behavior and runner version

• package.json lacks a packageManager field, so v5’s implicit dependency caching won’t run; if you need caching, either add "packageManager": "npm@<version>" (or relevant manager) or explicitly set the cache input.
• Confirm that all runners (especially any self-hosted ones) are on GitHub Actions Runner v2.327.1 or later to support Node 24.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[PeterDaveHello]

@coderabbitai review

[coderabbitai]

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[Copilot]

Pull Request Overview

Updates the actions/setup-node GitHub Action from version 4 to version 5 across all workflow files to leverage the latest features and improvements, including automatic package manager detection and caching enhancements.

• Updates all GitHub workflow files to use actions/setup-node@v5
• Maintains existing Node.js version 20 configuration
• Ensures compatibility with the latest action features

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File	Description
.github/workflows/verify-configs.yml	Updates setup-node action to v5 for config verification workflow
.github/workflows/tagged-release.yml	Updates setup-node action to v5 for tagged release workflow
.github/workflows/pre-release-build.yml	Updates setup-node action to v5 for pre-release build workflow
.github/workflows/pr-tests.yml	Updates setup-node action to v5 for PR testing workflow

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}