[dependabot]

Bumps the github-actions group with 3 updates in the / directory: runs-on/action, actions/setup-node and actions/upload-artifact.

Updates runs-on/action from 2.3.1 to 2.5.0

Release notes

Sourced from runs-on/action's releases.

v2.5.0

What's Changed

New

• Disk metrics report free and total bytes (disk_free, disk_total), and the post-step summary charts them.
• Disk metrics identify each mount's EBS volume with a new VolumeId dimension, so a sticky disk or snapshot volume on /var/lib/docker reports its own volume instead of the root volume's. (#68, closes #19)

Changed

• On RunsOn v3.4.0 and later, the runner agent reports the job cost in the "Complete runner" step, and show_costs only chooses how it is shown (inline, summary or off). On those stacks the action no longer calls the RunsOn cost API or DescribeAvailabilityZones. Older stacks keep the post-step cost report. (#70)
• Disk metrics now carry device and VolumeId dimensions. CloudWatch matches exact dimension sets, so dashboards or alarms that select disk metrics by their dimensions need the new ones.

v2.4.0

What's Changed

New

• sticky_cache: tool-cache persists RUNNER_TOOL_CACHE on the sticky disk, so toolchains downloaded by setup-* actions are reused by later jobs in the same sticky lineage. Linux and Windows. Run it before the setup-* actions. The mode hides the runner image's preinstalled toolchains for the job; read the README section before enabling it. (#54, #55)

Changed

• sccache: s3 scopes its S3 key prefix per repository and platform: cache/sccache/<repository-id>/<os>-<arch>/v1 instead of the shared cache/sccache. The first run after upgrading starts a cold cache for each repository and platform. Objects under the old prefix expire through the stack's cache lifecycle rule. Thanks @​garysassano (#58)
• Cost reporting is skipped when pricing is unavailable: the action logs an informational message instead of a warning, and prints no cost table or job summary. (#61)

Fixed

• sticky_cache: git: sparse and filter: blob:none checkouts of large repositories no longer fail with HTTP 400 / expected 'packfile' when git fetches the missing blobs. Checking the requested objects against the mirror is also much faster (one pass instead of one git process per object). Thanks @​zackerydev (#64)

Full Changelog: runs-on/action@v2.3.1...v2.4.0

Commits

• 17b5909 dist: rebuild binaries for v2.5.0
• e8a299c Merge branch 'main' into v2
• 1f79b1a Bump README to v2.5.0
• 1720eab Let the RunsOn agent report job costs on v3.4.0+ stacks (#70)
• e41074e dist: rebuild binaries
• 854c754 Publish the EBS VolumeId of each disk metric mount
• 742ac2b feat(metrics): publish disk free and total bytes
• dfae4d9 dist: rebuild binaries for v2.4.0
• de0c266 Merge branch 'main' into v2
• 040eadd Bump README to v2.4.0
• Additional commits viewable in compare view

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

• Add support for mise.toml file by @​gperdomor in actions/setup-node#1421
• Support absolute paths in node-version-file by @​v-mahabaleshwars in actions/setup-node#1633

Bug fixes:

• Add Node version validation and manifest fetch retry by @​v-jitenderpalsingh in actions/setup-node#1580

Documentation updates:

• README.md: bump actions/checkout to latest version 7 by @​deining in actions/setup-node#1578
• docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @​v-gowridurgad in actions/setup-node#1593
• Fixed cache recommendation syntax by @​SubJunk in actions/setup-node#1603

Dependency updates:

• Update workflow pins and migrate Node matrices to modern versions by @​v-HarithaVattikuti in actions/setup-node#1583
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in actions/setup-node#1584
• Pin @​types/node to v24 by @​v-priyagupta108 in actions/setup-node#1585
• Override brace-expansion to 5.0.8 by @​v-priyagupta108 with @​Copilot in actions/setup-node#1599
• Upgrade actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in actions/setup-node#1598
• Upgrade prettier from 3.8.4 to 3.9.6 by @​dependabot in actions/setup-node#1590
• Upgrade @​vercel/ncc from 0.44.0 to 0.45.0 by @​dependabot in actions/setup-node#1610
• Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @​dependabot in actions/setup-node#1602
• Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @​dependabot in actions/setup-node#1629
• Upgrade @​types/semver from 7.7.1 to 7.8.0 by @​dependabot in actions/setup-node#1616
• Upgrade @​typescript-eslint/parser from 8.62.0 to 8.70.0 by @​dependabot in actions/setup-node#1615
• Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @​dependabot in actions/setup-node#1631
• Upgrade jest-each from 30.4.1 to 30.5.2 by @​dependabot in actions/setup-node#1636
• Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @​dependabot in actions/setup-node#1638
• Update dependencies and add license files by @​v-HarithaVattikuti in actions/setup-node#1642
• Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @​dependabot in actions/setup-node#1635

New Contributors

• @​v-jitenderpalsingh made their first contribution in actions/setup-node#1580
• @​philip-gai made their first contribution in actions/setup-node#1584
• @​gperdomor made their first contribution in actions/setup-node#1421
• @​SubJunk made their first contribution in actions/setup-node#1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits

• 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
• 7207c4f chore: update dependencies and add license files (#1642)
• 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
• fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
• 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
• 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
• a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
• 680d1e4 Support absolute paths in node-version-file (#1633)
• db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
• 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
• Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Updates @​actions/artifact to v6.3.1.

New Contributors

• @​tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

• cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
• c2acded chore: prepare v7.0.2 release
• 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
• 8cbe1be Bump @​actions/artifact to 6.3.1
• See full diff in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
tendnote-web	Ignored	Preview	Oct 27, 2026 12:36pm UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: f3c5e282-8d63-4fb3-ba88-f77e2e0ea6f4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}