From 170d61c3d2924954a3a70630e54c51bd0c54471c Mon Sep 17 00:00:00 2001 From: Ariel Illouz Date: Fri, 3 Apr 2026 23:46:42 +0300 Subject: [PATCH] Pin npm plugin dependency versions in action.yml Pin moment, lodash, and axios to specific versions to ensure reproducible builds and prevent unexpected breakage from new releases. Co-Authored-By: Claude Opus 4.6 (1M context) --- action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/action.yml b/action.yml index 865c368b..7c412725 100644 --- a/action.yml +++ b/action.yml @@ -120,7 +120,7 @@ runs: - name: Install Dependencies for plugins shell: bash continue-on-error: true - run: npm i --silent moment lodash axios @octokit/rest@20.1.1 + run: npm i --silent moment@2.30.1 lodash@4.18.1 axios@1.14.0 @octokit/rest@20.1.1 - name: Run RulesEngine shell: bash