chore(deps): update actions/setup-node action to v4.1.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	minor	v4.0.4 -> v4.1.0

---

Release Notes

actions/setup-node (actions/setup-node)

v4.1.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - "* 0-4 * * 3" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

anthropic debug - [puLL-Merge] - actions/[email protected]

Description

This PR makes several changes to improve cache management and GitHub Enterprise Server (GHES) detection in the setup-node action. The main changes include modifying the cache key to include the CPU architecture, updating the GHES detection logic, and adjusting the pnpm-lock.yaml file.

Changes

Changes

1. .github/workflows/publish-immutable-actions.yml:

   • Updated the trigger event from release: [created] to release: [published]
   • Changed the publish action version from 0.0.1 to 0.0.3
   • Removed the github-token input

2. __tests__/cache-restore.test.ts:

   • Added os module import
   • Introduced arch variable set to 'arm64'
   • Updated cache key generation to include architecture
   • Added archSpy to mock os.arch() function

3. __tests__/cache-utils.test.ts:

   • Added new tests for the isGhes() function to cover various scenarios

4. src/cache-restore.ts:

   • Added os module import
   • Included CPU architecture in the cache key generation

5. src/cache-utils.ts:

   • Updated isGhes() function to handle more cases:
     • Now checks for GitHub.com, GitHub Enterprise Cloud, and localhost
     • Uses trimEnd() on the hostname to remove potential trailing whitespace

6. dist/cache-save/index.js and dist/setup/index.js:

   • Reflected changes made in the source files

7. __tests__/data/pnpm-lock.yaml:

   • Updated to a newer version of the lockfile format

Possible Issues

The changes to the cache key generation might invalidate existing caches, potentially causing longer build times for the first run after this update.

Security Hotspots

No significant security issues were identified in this PR. The changes to the GHES detection logic improve the accuracy of environment detection but don't introduce new security risks.

[github-actions]

bedrock debug - [puLL-Merge] - actions/[email protected]

Description

This PR enhances the caching mechanism in the setup-node action by including the CPU architecture in the cache key and refines the GitHub Enterprise Server (GHES) detection logic. The changes aim to improve cache specificity and accuracy in determining the GitHub environment.

Changes

Changes

1. .github/workflows/publish-immutable-actions.yml:

   • Updated the trigger event from created to published for releases.
   • Changed the version of the actions/publish-immutable-action from 0.0.1 to 0.0.3.
   • Removed the explicit github-token input.

2. __tests__/cache-restore.test.ts:

   • Added os module import and mocking of os.arch() function.
   • Updated test cases to include CPU architecture in cache key expectations.

3. __tests__/cache-utils.test.ts:

   • Added new test cases for the isGhes() function to cover various GitHub environments.

4. src/cache-restore.ts:

   • Added CPU architecture to the cache key construction.

5. src/cache-utils.ts:

   • Refined the isGhes() function to more accurately detect GitHub Enterprise Server environments.

6. dist/cache-save/index.js and dist/setup/index.js:

   • Compiled changes reflecting the updates in the source files.

Possible Issues

• The changes to the cache key structure (including CPU architecture) may invalidate existing caches, potentially leading to longer build times initially as new caches are created.

Security Hotspots

No significant security issues were identified in this change.

[github-actions]

openai debug - [puLL-Merge] - actions/[email protected]

Description

This pull request introduces several changes across different parts of the project:

1. Modifies the workflow trigger for publishing immutable actions.
2. Updates dependencies and includes architectural information in cache keys.
3. Adds new unit tests to ensure functionality across different conditions.
4. Updates dependencies in the pnpm-lock.yaml file to newer versions.
5. Enhances the isGhes utility function to better handle different GitHub URL scenarios.

Possible Issues

1. Dependency Updates: The pnpm-lock.yaml has substantial updates, which might introduce inconsistencies or incompatibilities. It is advisable to thoroughly test end-to-end to confirm that all functionalities remain intact.
2. Cache Key Changes: Modifying the cache key format to include the architecture can potentially invalidate existing caches, leading to cache misses until new caches are built.

Security Hotspots

1. URL Parsing in isGhes Function:

   const hostname = ghUrl.hostname.trimEnd().toUpperCase();

   It's important to ensure that this change does not introduce vulnerabilities such as improper handling of specific hostname formats or bypassing certain checks.

2. Secrets Handling in Workflow:
   Removed the github-token input from the publish step in the workflow:

   -        with:
   -          github-token: ${{ secrets.GITHUB_TOKEN }}

   Make sure that the actions/[email protected] version being used does not require explicit tokens and is secure in its default configuration.

Changes

Changes

.github/workflows/publish-immutable-actions.yml

• Changed the release trigger from created to published.
• Updated the actions/publish-immutable-action version used in the publish step from 0.0.1 to 0.0.3.

__tests__/cache-restore.test.ts

• Added os module import.
• Included architecture (arch) in the cache key computation.
• Added new tests to check the os architecture behavior.

__tests__/cache-utils.test.ts

• Added tests for the isGhes function to handle different GitHub URL scenarios.

__tests__/data/pnpm-lock.yaml

• Updated dependencies and their versions extensively.

dist/cache-save/index.js

• Enhanced the isGhes function to handle various GitHub URL scenarios more robustly.

dist/setup/index.js

• Incorporated the system architecture in the cache key computation.
• Enhanced the isGhes function as described.

src/cache-restore.ts

• Added os module import.
• Included architecture (arch) in the cache key computation.

src/cache-utils.ts

• Enhanced the isGhes function for improved hostname handling.