From a083995c7d75a7b98619386c7edc34952b55e66e Mon Sep 17 00:00:00 2001 From: Francesco Gringl-Novy Date: Thu, 23 Apr 2026 13:09:40 +0200 Subject: [PATCH] chore(ci): Bump pnpm/action-setup to v5 and pin to commit SHA Bump from v4 to v5.0.0 which uses Node.js 24 (resolves the GHA deprecation warning for Node.js 20 actions). Pin to the exact commit SHA for supply chain security. Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/workflows/build.yml | 4 ++-- .github/workflows/canary.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index add193a29d3b..c556cc3fe357 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -922,7 +922,7 @@ jobs: uses: actions/checkout@v6 with: ref: ${{ env.HEAD_COMMIT }} - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: version: 9.15.9 - name: Set up Node @@ -1054,7 +1054,7 @@ jobs: uses: actions/checkout@v6 with: ref: ${{ env.HEAD_COMMIT }} - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: version: 9.15.9 - name: Set up Node diff --git a/.github/workflows/canary.yml b/.github/workflows/canary.yml index e28d6988d9a1..1d9b11f6515e 100644 --- a/.github/workflows/canary.yml +++ b/.github/workflows/canary.yml @@ -126,7 +126,7 @@ jobs: uses: actions/checkout@v6 with: ref: ${{ env.HEAD_COMMIT }} - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: version: 9.15.9 - name: Set up Node