chore: update all dependencies (major)

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@types/sinon (source)	^21.0.0 → ^22.0.0			devDependencies	major
actions/setup-dotnet	v5 → v6			action	major
actions/setup-go	v6 → v7			action	major
actions/setup-node	v6 → v7			action	major
actions/setup-python	v6 → v7			action	major
typescript (source)	^6.0.0 → ^7.0.0			devDependencies	major

---

Release Notes

actions/setup-dotnet (actions/setup-dotnet)

v6.0.0

Compare Source

What's Changed

• Migrate to ESM and upgrade dependencies by @​priyagupta108 in #​752
• Bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in #​751
• chore(deps): bump @​actions/cache to 6.2.0 by @​philip-gai in #​756

New Contributors

• @​philip-gai made their first contribution in #​756

Full Changelog: actions/setup-dotnet@v5...v6.0.0

v6

Compare Source

actions/setup-go (actions/setup-go)

v7.0.0

Compare Source

What's Changed

• Migrate to ESM and upgrade dependencies by @​priyagupta108 in #​763
• chore(deps): bump @​actions/cache to 6.2.0 by @​philip-gai in #​771

New Contributors

• @​philip-gai made their first contribution in #​771

Full Changelog: actions/setup-go@v6...v7.0.0

v7

Compare Source

actions/setup-node (actions/setup-node)

v7.0.0

Compare Source

What's Changed

Enhancements:

• Add cache-primary-key and cache-matched-key as outputs by @​gowridurgad in #​1577
• Migrate to ESM and upgrade dependencies by @​gowridurgad in #​1574

Bug fixes:

• Remove dummy NODE_AUTH_TOKEN export by @​gowridurgad in #​1558
• Only use mirrorToken in getManifest if it's provided by @​deiga in #​1548

Documentation updates:

• Add documentation for publishing to npm with Trusted Publisher (OIDC) by @​chiranjib-swain in #​1536
• docs: Update restore-only cache documentation by @​priya-kinthali in #​1550
• docs: Update caching recommendations to mitigate cache poisoning risks by @​chiranjib-swain in #​1567

Dependency update:

• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in #​1569

New Contributors

• @​chiranjib-swain made their first contribution in #​1536
• @​deiga made their first contribution in #​1548
• @​jasongin made their first contribution in #​1569

Full Changelog: actions/setup-node@v6...v7.0.0

v7

Compare Source

actions/setup-python (actions/setup-python)

v7.0.0

Compare Source

v7

Compare Source

microsoft/TypeScript (typescript)

v7.0.2

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[gemini-code-assist]

Code Review

This pull request updates the @types/sinon dependency version from ^21.0.0 to ^22.0.0 in the spannerlib-node wrapper's package.json file. There are no review comments, and I have no feedback to provide.

[olavloite]

The PR contains modifications to workflow configuration files under '.github/workflows/', which is disallowed according to the security rules.

[olavloite]

The PR was rejected because disallowed files were modified. Specifically, it contains modifications to GitHub Actions workflow configuration files under '.github/workflows/', which is prohibited by the security rules.

[olavloite]

The PR contains modifications to workflow configuration files (.yml under '.github/workflows/'), which is disallowed under the security rules. Only modifications to dependency configuration or lock files are allowed.

[olavloite]

The PR modifies workflow configuration files under '.github/workflows/', which is disallowed according to the security instructions.

[olavloite]

The PR modifies workflow configuration files under '.github/workflows/', which is disallowed according to the security instructions. Only dependency configuration or lock files should be modified.