Bump pnpm/action-setup from 6 to 6.0.9 #82
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -18,7 +18,7 @@ jobs: | |
| - uses: actions/checkout@v7 | ||
|
|
||
| - name: Install pnpm | ||
| uses: pnpm/action-setup@v6.0.9 | ||
|
|
||
| - name: Use Node.js ${{ matrix.node-version }} | ||
| uses: actions/setup-node@v7 | ||
|
Comment on lines
18
to
24
Contributor
There was a problem hiding this comment. Good catch — addressed in #83, which pins all three actions ( |
||
|
|
@@ -44,7 +44,7 @@ jobs: | |
| uses: actions/checkout@v7 | ||
|
|
||
| - name: Install pnpm | ||
| uses: pnpm/action-setup@v6.0.9 | ||
|
Comment on lines
46
to
+47
Contributor
There was a problem hiding this comment. Leaving the duplication as-is. YAML anchors aren't supported in Actions workflow files, so the only real options are a reusable workflow or a local composite action — and for three steps across two jobs, that indirection costs more in readability and Dependabot coverage (a nested |
||
|
|
||
| - name: Use Node.js | ||
| uses: actions/setup-node@v7 | ||
|
Comment on lines
46
to
50
Contributor
There was a problem hiding this comment. Good catch — addressed in #83, which pins all three actions ( |
||
|
|
||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Leaving the duplication as-is. YAML anchors aren't supported in Actions workflow files, so the only real options are a reusable workflow or a local composite action — and for three steps across two jobs, that indirection costs more in readability and Dependabot coverage (a nested
action.ymlneeds its owndirectoriesentry independabot.yml) than the drift risk it removes. Worth revisiting if a third job appears.