Update actions/setup-node action to v7

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	major	v6 → v7

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/setup-node (actions/setup-node)

v7.0.0

Compare Source

What's Changed

Enhancements:

• Add cache-primary-key and cache-matched-key as outputs by @​gowridurgad in #​1577
• Migrate to ESM and upgrade dependencies by @​gowridurgad in #​1574

Bug fixes:

• Remove dummy NODE_AUTH_TOKEN export by @​gowridurgad in #​1558
• Only use mirrorToken in getManifest if it's provided by @​deiga in #​1548

Documentation updates:

• Add documentation for publishing to npm with Trusted Publisher (OIDC) by @​chiranjib-swain in #​1536
• docs: Update restore-only cache documentation by @​priya-kinthali in #​1550
• docs: Update caching recommendations to mitigate cache poisoning risks by @​chiranjib-swain in #​1567

Dependency update:

• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in #​1569

New Contributors

• @​chiranjib-swain made their first contribution in #​1536
• @​deiga made their first contribution in #​1548
• @​jasongin made their first contribution in #​1569

Full Changelog: actions/setup-node@v6...v7.0.0

v7

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

To increment version on merge, please add one of patch (default), minor, or major label to this PR.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c03b21e971

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Keep registry auth available before Yarn install

This workflow sets registry-url here but doesn't provide NODE_AUTH_TOKEN until the final npm publish step, after yarn install has already run. The repo is pinned to Yarn Classic (packageManager: yarn@1.22.22), and the setup-node v7 breaking change says registry-url without NODE_AUTH_TOKEN can make legacy Yarn 1.x fail because the generated .npmrc references that env var; this blocks the RC job before lint/tests/build. Move/remove the registry setup for install-only steps or make NODE_AUTH_TOKEN available before the Yarn install.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Remove registry auth from the design install

This manual design workflow now uses setup-node@v7 with registry-url, then runs Yarn Classic with no NODE_AUTH_TOKEN anywhere in the job. Per the setup-node v7 breaking change, that combination can make legacy Yarn 1.x fail on the generated .npmrc before build-dictionary runs; since this workflow does not publish, dropping registry-url (or setting the token before install) avoids breaking the workflow.

Useful? React with 👍 / 👎.

[ice1080]

Not merging yet until the graphite comments are reviewed in more depth