setup-node

setup-node copied to clipboard

security

2

This pull request adds a new `SECURITY.md` file to the project, outlining the security policy. The file specifies which versions are supported with security updates and provides instructions for reporting...

Heyson315

Don't default NPM_AUTH_TOKEN to support NPM OIDC

14

**Description:** A lot of packages are switching to OIDC to validate packages when publishing. It took a lot of debugging, but we had to reset the auth token to empty...

mannycarrera4

feat: add support for mise.toml file

7

**Description:** This MR add support for mise.toml file - https://mise.jdx.dev **Related issue:** https://github.com/actions/setup-node/issues/1304 **Check list:** - [x] Mark if documentation changes are required. - [x] Mark if tests were added...

gperdomor

docs: upgrade actions/checkout from v5 to v6

1

**Description:** Updated GitHub Actions checkout action from v5 to v6 in multiple sections of the README. **Related issue:** n/a **Check list:** - [ ] Mark if documentation changes are required....

dunglas

feat(node-version-file): support parsing `devEngines` field

8

**Description:** Currently if you want to support multiple versions for running (e.g. a library) but enforce a specific version for development you can set `devEngines` with npm 11. This PR...

susnux

Trusted Publisher documentation

9

**Description:** Document an example of how publishing to npm is handled if using npm's Trusted Publisher setup. In particular, explicitly answer the question whether `NODE_AUTH_TOKEN` needs to be set at...

jasonkarns

Improvements to the worst package manager

1

**Description:** I was surprised to see that [this article](https://archive.is/w3xLl) is right. This pull request aims to improve the ecosystem as this is quite a commonly used github action. I'd also...

Boosted-Bonobo

**Description:** Describe your changes. **Related issue:** Add link to the related issue. **Check list:** - [x] Mark if documentation changes are required. - [x] Mark if tests were added or...

capiyomero

Bump @typescript-eslint/parser from 5.62.0 to 8.46.2

1

Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.62.0 to 8.46.2. Release notes Sourced from @​typescript-eslint/parser's releases. v8.46.2 8.46.2 (2025-10-20) 🩹 Fixes eslint-plugin: [prefer-optional-chain] skip optional chaining when it could change the result (#11702) typescript-estree:...

dependabot[bot]

chris-martin