66 - main
77 pull_request :
88
9+ permissions :
10+ contents : read
11+
12+ concurrency :
13+ group : ci-${{ github.ref }}
14+ cancel-in-progress : true
15+
916jobs :
1017 lint :
1118 runs-on : ubuntu-latest
1219
1320 steps :
14- - uses : actions/checkout@v4
21+ - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
22+ with :
23+ persist-credentials : false
1524
16- - uses : actions/setup-node@v4
25+ - uses : pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
26+ - uses : actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
1727 with :
1828 node-version : 22
1929
20- - run : corepack enable
21-
2230 - name : find pnpm cache path
2331 id : cache
24- run : echo "path=$(pnpm store path)" >> $GITHUB_OUTPUT
32+ run : echo "path=$(pnpm store path)" >> " $GITHUB_OUTPUT"
2533
26- - uses : actions/cache@v4
34+ - uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
2735 with :
2836 path : ${{ steps.cache.outputs.path }}
2937 key : v1-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -33,25 +41,26 @@ jobs:
3341 - name : Install dependencies
3442 run : pnpm install --frozen-lockfile
3543
36- - run : pnpm lint
44+ - run : node --run lint
3745
3846 typecheck :
3947 runs-on : ubuntu-latest
4048
4149 steps :
42- - uses : actions/checkout@v4
50+ - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
51+ with :
52+ persist-credentials : false
4353
44- - uses : actions/setup-node@v4
54+ - uses : pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
55+ - uses : actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
4556 with :
4657 node-version : 22
4758
48- - run : corepack enable
49-
5059 - name : find pnpm cache path
5160 id : cache
52- run : echo "path=$(pnpm store path)" >> $GITHUB_OUTPUT
61+ run : echo "path=$(pnpm store path)" >> " $GITHUB_OUTPUT"
5362
54- - uses : actions/cache@v4
63+ - uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
5564 with :
5665 path : ${{ steps.cache.outputs.path }}
5766 key : v1-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -61,25 +70,26 @@ jobs:
6170 - name : Install dependencies
6271 run : pnpm install --frozen-lockfile
6372
64- - run : pnpm typecheck
73+ - run : node --run typecheck
6574
6675 test :
6776 runs-on : ubuntu-latest
6877
6978 steps :
70- - uses : actions/checkout@v4
79+ - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
80+ with :
81+ persist-credentials : false
7182
72- - uses : actions/setup-node@v4
83+ - uses : pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
84+ - uses : actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
7385 with :
7486 node-version : 22
7587
76- - run : corepack enable
77-
7888 - name : find pnpm cache path
7989 id : cache
80- run : echo "path=$(pnpm store path)" >> $GITHUB_OUTPUT
90+ run : echo "path=$(pnpm store path)" >> " $GITHUB_OUTPUT"
8191
82- - uses : actions/cache@v4
92+ - uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
8393 with :
8494 path : ${{ steps.cache.outputs.path }}
8595 key : v1-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -89,25 +99,26 @@ jobs:
8999 - name : Install dependencies
90100 run : pnpm install --frozen-lockfile
91101
92- - run : pnpm test
102+ - run : node --run test
93103
94104 build :
95105 runs-on : ubuntu-latest
96106
97107 steps :
98- - uses : actions/checkout@v4
108+ - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
109+ with :
110+ persist-credentials : false
99111
100- - uses : actions/setup-node@v4
112+ - uses : pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
113+ - uses : actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
101114 with :
102115 node-version : 22
103116
104- - run : corepack enable
105-
106117 - name : find pnpm cache path
107118 id : cache
108- run : echo "path=$(pnpm store path)" >> $GITHUB_OUTPUT
119+ run : echo "path=$(pnpm store path)" >> " $GITHUB_OUTPUT"
109120
110- - uses : actions/cache@v4
121+ - uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
111122 with :
112123 path : ${{ steps.cache.outputs.path }}
113124 key : v1-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -117,6 +128,4 @@ jobs:
117128 - name : Install dependencies
118129 run : pnpm install --frozen-lockfile
119130
120- - run : pnpm build
121-
122- - run : pnpm publint
131+ - run : node --run build
0 commit comments