Bump actions/setup-node from 4 to 7 - #107

Open

dependabot[bot] wants to merge 1 commit into

mainfrom

dependabot/github_actions/actions/setup-node-7

SonarQubeCloud / SonarCloud Code Analysis failed Aug 3, 2026 in 17s

Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check warning on line 20 in .github/workflows/pull-request.yml

sonarqubecloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=qavajs_create&issues=AZ_JJs4sJ8uLzjRF6aqS&open=AZ_JJs4sJ8uLzjRF6aqS&pullRequest=107

Check warning on line 20 in .github/workflows/npm-publish.yml

sonarqubecloud / SonarCloud Code Analysis

Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.

See more on https://sonarcloud.io/project/issues?id=qavajs_create&issues=AZ_JJs6zJ8uLzjRF6aqT&open=AZ_JJs6zJ8uLzjRF6aqT&pullRequest=107

Check warning on line 20 in .github/workflows/pull-request.yml

sonarqubecloud / SonarCloud Code Analysis

Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.

See more on https://sonarcloud.io/project/issues?id=qavajs_create&issues=AZ_JJs4sJ8uLzjRF6aqR&open=AZ_JJs4sJ8uLzjRF6aqR&pullRequest=107

Check warning on line 19 in .github/workflows/pull-request.yml

sonarqubecloud / SonarCloud Code Analysis

Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.

See more on https://sonarcloud.io/project/issues?id=qavajs_create&issues=AZ_JJs4sJ8uLzjRF6aqQ&open=AZ_JJs4sJ8uLzjRF6aqQ&pullRequest=107

View more details on SonarQubeCloud