chore(deps): bump the dependencies group with 2 updates

[dependabot]

Bumps the dependencies group with 2 updates: actions/setup-node and CodSpeedHQ/action.

Updates actions/setup-node from 6.4.0 to 7.0.0

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

• Add cache-primary-key and cache-matched-key as outputs by @​gowridurgad in actions/setup-node#1577
• Migrate to ESM and upgrade dependencies by @​gowridurgad in actions/setup-node#1574

Bug fixes:

• Remove dummy NODE_AUTH_TOKEN export by @​gowridurgad in actions/setup-node#1558
• Only use mirrorToken in getManifest if it's provided by @​deiga in actions/setup-node#1548

Documentation updates:

• Add documentation for publishing to npm with Trusted Publisher (OIDC) by @​chiranjib-swain in actions/setup-node#1536
• docs: Update restore-only cache documentation by @​priya-kinthali in actions/setup-node#1550
• docs: Update caching recommendations to mitigate cache poisoning risks by @​chiranjib-swain in actions/setup-node#1567

Dependency update:

• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in actions/setup-node#1569

New Contributors

• @​chiranjib-swain made their first contribution in actions/setup-node#1536
• @​deiga made their first contribution in actions/setup-node#1548
• @​jasongin made their first contribution in actions/setup-node#1569

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

• Update @​actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @​HarithaVattikuti in actions/setup-node#1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

Commits

• 8207627 Migrate to ESM and upgrade dependencies (#1574)
• 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
• 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
• 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
• 30eb73b Resolve high-severity audit issues
• 4e1a87a Update dist
• 360237f Strict equality
• 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
• f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
• 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
• Additional commits viewable in compare view

Updates CodSpeedHQ/action from 4.18.2 to 4.18.5

Release notes

Sourced from CodSpeedHQ/action's releases.

v4.18.5

Release Notes

💼 Other

• Bump pinned valgrind-codspeed to 3.26.0-0codspeed6 (#448) by @​adriencaccia in #448
  • fix: hangs on ARM64 due to atomics by @​not-matthias in CodSpeedHQ/valgrind-codspeed#23
  • fix(aspacem): raise amd64 managed address ceiling to 1 TiB by @​not-matthias in CodSpeedHQ/valgrind-codspeed#22

Install codspeed-runner 4.18.4

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.4/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.18.4

File	Platform	Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.18.4...v4.18.5

v4.18.4

What's Changed

• fix 4.18.3 runner hash – bf19f56fe8857e83e4343138c1a927e56f666e3b by @​adriencaccia

Full Changelog: CodSpeedHQ/action@v4.18.3...v4.18.4

Commits

• f99becd Release v4.18.5 🚀
• e796848 chore: bump runner version to 4.18.4
• 9f3a37e Release v4.18.4 🚀
• bf19f56 fix: use correct 4.18.3 runner hash
• eea1367 Release v4.18.3 🚀
• 183fe0f chore: bump runner version to 4.18.3 (#220)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[changeset-bot]

⚠️ No Changeset found

Latest commit: 1f3b6ee

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[codspeed-hq]

Merging this PR will improve performance by 15.66%

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

⚡ 6 improved benchmarks
❌ 9 regressed benchmarks
✅ 197 untouched benchmarks

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Mode	Benchmark	BASE	HEAD	Efficiency
❌	Memory	compat-source memory: delegated source() + map() through wrapper	9.4 KB	30.6 KB	-69.46%
❌	Memory	concat-source memory: source() concatenates children	252 KB	357 KB	-29.42%
❌	Memory	source-map-source memory: map({ columns: true })	784 B	1,072 B	-26.87%
❌	Memory	source-map-source memory: new SourceMapSource(with inner map)	912 B	1,232 B	-25.97%
❌	Simulation	cached-source: new CachedSource()	315.8 µs	379 µs	-16.69%
❌	Memory	source-map-source memory: sourceAndMap({ columns: true }) (combined inner)	2 MB	2.4 MB	-14.99%
❌	Simulation	replace-source: new ReplaceSource()	178.1 µs	208.6 µs	-14.63%
❌	Memory	replace-source memory: construct + 100 insertions	9.9 KB	11.6 KB	-14.25%
❌	Simulation	replace-source: source() (no replacements)	229.6 µs	260 µs	-11.7%
⚡	Memory	cached-source memory: warm sourceAndMap() returns cached references	384 B	48 B	×8
⚡	Memory	clear-cache memory: shared modules (no visited set — allocates per chunk)	18.9 KB	5.3 KB	×3.6
⚡	Memory	clear-cache memory: shared modules (visited set — single allocation)	776 B	392 B	+97.96%
⚡	Memory	cached-source memory: getCachedData() allocates BufferedMap	648 B	392 B	+65.31%
⚡	Memory	size-only-source memory: new SizeOnlySource()	90.8 KB	57.8 KB	+57.15%
⚡	Memory	original-source memory: map({ columns: false }) line-only mappings	117.2 KB	104.5 KB	+12.12%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing dependabot/github_actions/dependencies-23d0c9bbca (1f3b6ee) with main (1aa76ca)}