Build(deps): bump the all-github-actions group across 1 directory with 3 updates

[dependabot]

Bumps the all-github-actions group with 3 updates in the / directory: actions/setup-node, actions/upload-artifact and actions/download-artifact.

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

• Add support for mise.toml file by @​gperdomor in actions/setup-node#1421
• Support absolute paths in node-version-file by @​v-mahabaleshwars in actions/setup-node#1633

Bug fixes:

• Add Node version validation and manifest fetch retry by @​v-jitenderpalsingh in actions/setup-node#1580

Documentation updates:

• README.md: bump actions/checkout to latest version 7 by @​deining in actions/setup-node#1578
• docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @​v-gowridurgad in actions/setup-node#1593
• Fixed cache recommendation syntax by @​SubJunk in actions/setup-node#1603

Dependency updates:

• Update workflow pins and migrate Node matrices to modern versions by @​v-HarithaVattikuti in actions/setup-node#1583
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in actions/setup-node#1584
• Pin @​types/node to v24 by @​v-priyagupta108 in actions/setup-node#1585
• Override brace-expansion to 5.0.8 by @​v-priyagupta108 with @​Copilot in actions/setup-node#1599
• Upgrade actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in actions/setup-node#1598
• Upgrade prettier from 3.8.4 to 3.9.6 by @​dependabot in actions/setup-node#1590
• Upgrade @​vercel/ncc from 0.44.0 to 0.45.0 by @​dependabot in actions/setup-node#1610
• Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @​dependabot in actions/setup-node#1602
• Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @​dependabot in actions/setup-node#1629
• Upgrade @​types/semver from 7.7.1 to 7.8.0 by @​dependabot in actions/setup-node#1616
• Upgrade @​typescript-eslint/parser from 8.62.0 to 8.70.0 by @​dependabot in actions/setup-node#1615
• Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @​dependabot in actions/setup-node#1631
• Upgrade jest-each from 30.4.1 to 30.5.2 by @​dependabot in actions/setup-node#1636
• Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @​dependabot in actions/setup-node#1638
• Update dependencies and add license files by @​v-HarithaVattikuti in actions/setup-node#1642
• Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @​dependabot in actions/setup-node#1635

New Contributors

• @​v-jitenderpalsingh made their first contribution in actions/setup-node#1580
• @​philip-gai made their first contribution in actions/setup-node#1584
• @​gperdomor made their first contribution in actions/setup-node#1421
• @​SubJunk made their first contribution in actions/setup-node#1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits

• 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
• 7207c4f chore: update dependencies and add license files (#1642)
• 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
• fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
• 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
• 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
• a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
• 680d1e4 Support absolute paths in node-version-file (#1633)
• db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
• 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
• Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Updates @​actions/artifact to v6.3.1.

New Contributors

• @​tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

• cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
• c2acded chore: prepare v7.0.2 release
• 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
• 8cbe1be Bump @​actions/artifact to 6.3.1
• See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

• Update the readme by @​danwkennedy in actions/download-artifact#473
• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Update @​actions/artifact to 6.3.1 by @​tunc-d in actions/download-artifact#492
• Prepare download-artifact v8.0.2 by @​tunc-d in actions/download-artifact#493

New Contributors

• @​tunc-d made their first contribution in actions/download-artifact#492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits

• 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
• e455989 Prepare download-artifact v8.0.2
• a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
• 29bb7ce Update @​actions/artifact to 6.3.1
• 484a0b5 Update the readme (#473)
• See full diff in compare view

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/actions/setup-node	7.1.0	🟢 6.4	Details Check Score Reason Binary-Artifacts 🟢 9 binaries present in source code Maintained 🟢 10 22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 5 dependency not pinned by hash detected -- score normalized to 5 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 9 security policy file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches SAST 🟢 10 SAST tool is run on all commits
actions/actions/setup-node	7.1.0	🟢 6.4	Details Check Score Reason Binary-Artifacts 🟢 9 binaries present in source code Maintained 🟢 10 22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 5 dependency not pinned by hash detected -- score normalized to 5 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 9 security policy file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches SAST 🟢 10 SAST tool is run on all commits
actions/actions/setup-node	7.1.0	🟢 6.4	Details Check Score Reason Binary-Artifacts 🟢 9 binaries present in source code Maintained 🟢 10 22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 5 dependency not pinned by hash detected -- score normalized to 5 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 9 security policy file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• .github/workflows/lint-and-format.yml
• .github/workflows/release-tag.yml
• .github/workflows/update-codeql.yml

[data-douser]

@dependabot rebase

[dependabot]

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[data-douser]

LGTM