v5.118.0 proposal

.github/actions/datadog-ci/action.yml

@@ -4,7 +4,7 @@ description: Install @datadog/datadog-ci from npm and add it to PATH.
 runs:
   using: composite
   steps:
-    - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
       with:
         node-version: '20'
 

.github/actions/node/action.yml

@@ -5,6 +5,10 @@ inputs:
     description: "Version identifier of the version to use."
     required: false
     default: 'latest'
+  registry-url:
+    description: "npm registry URL to configure for publishing. Leave unset for jobs that don't publish."
+    required: false
+    default: ''
 runs:
   using: composite
   steps:
@@ -15,6 +19,7 @@ runs:
       continue-on-error: true
       with:
         version: ${{ inputs.version }}
+        registry-url: ${{ inputs.registry-url }}
     - if: steps.attempt.outcome == 'failure'
       shell: bash
       run: sleep 60
@@ -23,3 +28,4 @@ runs:
       uses: ./.github/actions/node/setup
       with:
         version: ${{ inputs.version }}
+        registry-url: ${{ inputs.registry-url }}

.github/actions/node/setup/action.yml

@@ -5,6 +5,10 @@ inputs:
     description: "Version identifier of the version to use."
     required: false
     default: 'latest'
+  registry-url:
+    description: "npm registry URL to configure for publishing. Leave unset for jobs that don't publish."
+    required: false
+    default: ''
 runs:
   using: composite
   steps:
@@ -41,10 +45,14 @@ runs:
         esac
         echo "version=$version" >> "$GITHUB_OUTPUT"
 
-    - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+    # registry-url is left empty for jobs that don't publish: setup-node only writes an
+    # .npmrc auth placeholder when it's set, and since v7.0.0 no longer backstops that
+    # placeholder with a dummy NODE_AUTH_TOKEN, so an always-on registry-url broke Yarn
+    # Classic (it hard-errors on an unresolved ${NODE_AUTH_TOKEN} env reference in .npmrc).
+    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
       with:
         node-version: ${{ steps.node-version.outputs.version }}
-        registry-url: ${{ inputs.registry-url || 'https://registry.npmjs.org' }}
+        registry-url: ${{ inputs.registry-url }}
 
     # The shipped package.json pins engines.node to the supported runtime range, but CI keeps
     # running the full suite on Node 18/20. Widen the field to >=18 for this checkout so the

.github/actions/testagent/logs/action.yml

@@ -10,7 +10,7 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         # Preserve untracked artifacts (coverage/, .nyc_output/, node_modules/) produced by earlier
         # test steps. Without this, the default `git clean -ffdx` wipes them before subsequent

.github/actions/testagent/start/action.yml

@@ -3,7 +3,7 @@ description: "Starts the APM Test Agent image with environment."
 runs:
   using: composite
   steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - run: docker compose up -d testagent || docker compose up -d testagent
       shell: bash
     - name: Wait for test agent to be ready

.github/workflows/aiguard.yml

@@ -18,7 +18,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: ./.github/actions/node/latest
       - uses: ./.github/actions/install
       - run: npm run test:aiguard:ci
@@ -36,7 +36,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: ./.github/actions/node/oldest-maintenance-lts
       - uses: ./.github/actions/install
       - run: npm run test:aiguard:ci
@@ -60,7 +60,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: ./.github/actions/node
         with:
           version: 24.14.1 # TODO: remove pin when https://github.com/nodejs/node/issues/62991 is fixed
@@ -86,7 +86,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: ./.github/actions/node
         with:
           version: ${{ matrix.version }}

.github/workflows/all-green.yml

@@ -22,7 +22,7 @@ jobs:
         with:
           scope: DataDog/dd-trace-js
           policy: all-green
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           sparse-checkout-cone-mode: false
           sparse-checkout: |

.github/workflows/apm-capabilities.yml

@@ -26,7 +26,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: ./.github/actions/node/latest
       - uses: ./.github/actions/install
       - run: npm run test:trace:core:ci
@@ -47,7 +47,7 @@ jobs:
       matrix:
         node-version: [oldest, maintenance, active, latest]
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: ./.github/actions/node
         with:
           version: ${{ matrix.node-version }}
@@ -66,7 +66,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: ./.github/actions/node
         with:
           version: 24.14.1 # TODO: remove pin when https://github.com/nodejs/node/issues/62991 is fixed