Merge branch 'master' into disable-install-scripts

Author: cnoble-may

.github/workflows/ci.yml

@@ -18,7 +18,7 @@ jobs:
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: Use Node.js ${{ matrix.node-version }}
       id: setup-node
       uses: ./

.github/workflows/release.yml

@@ -16,4 +16,4 @@ jobs:
       - uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4.4.0
         with:
           release-type: simple
-          token: ${{ secrets.STEP_GITHUB_ACTION_TOKEN  }}
+          token: ${{ secrets.LINZ_GITHUB_AUTOMATION }}

.kodiak.toml

@@ -3,9 +3,6 @@ version = 1
 [approve]
 auto_approve_usernames = ["dependabot"]
 
-[merge]
-automerge_label = "automerge 🚀"
-
 [merge.message]
 include_coauthors = true
 include_pull_request_url = true

CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [1.0.2](https://github.com/linz/action-setup-node/compare/v1.0.1...v1.0.2) (2026-03-03)
+
+
+### Bug Fixes
+
+* **deps:** bump actions/checkout from 4 to 6 ([#4](https://github.com/linz/action-setup-node/issues/4)) ([bcbb12d](https://github.com/linz/action-setup-node/commit/bcbb12db1be4b6730c5fe2e32bf12caedc49ad0e))
+
+## [1.0.1](https://github.com/linz/action-setup-node/compare/v1.0.0...v1.0.1) (2026-02-12)
+
+
+### Bug Fixes
+
+* **deps:** bump actions/setup-node from 6.0.0 to 6.1.0 ([#3](https://github.com/linz/action-setup-node/issues/3)) ([c98b307](https://github.com/linz/action-setup-node/commit/c98b30788903d7602b6e7d9b0a9b268267712dd6))
+* **deps:** bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 ([#6](https://github.com/linz/action-setup-node/issues/6)) ([f6040c5](https://github.com/linz/action-setup-node/commit/f6040c5dbb6c48e3b00e71286a08ea053e267ecf))
+
 ## 1.0.0 (2025-12-12)
 
 

action.yaml

@@ -62,6 +62,28 @@ runs:
       env:
         SAFE_CHAIN_NPM_MINIMUM_PACKAGE_AGE_EXCLUSIONS: "@linz/*,@linzjs/*,@basemaps/*"
       run: |
-        npm i -g @aikidosec/safe-chain
+        set -Eeuo pipefail
+
+        MAX_ATTEMPTS=5
+        DELAY=5  # seconds
+
+        echo "Installing @aikidosec/safe-chain globally with exponential backoff (max $MAX_ATTEMPTS attempts)..."
+        for ATTEMPT in $(seq 1 "$MAX_ATTEMPTS"); do
+          if npm install -g "@aikidosec/safe-chain"; then
+            echo "✅ @aikidosec/safe-chain installed successfully on attempt $ATTEMPT"
+            break
+          fi
+
+          if [[ "$ATTEMPT" -eq "$MAX_ATTEMPTS" ]]; then
+            echo "❌ Failed to install @aikidosec/safe-chain after $MAX_ATTEMPTS attempts"
+            exit 1
+          fi
+
+          echo "⚠️ Attempt $ATTEMPT failed. Retrying in $DELAYs..."
+          sleep "$DELAY"
+          DELAY=$(( DELAY * 2 ))  # exponential backoff
+        done
+
+        # Proceed with setup after successful install
         safe-chain setup-ci
         npm config set ignore-scripts true