From 6e71db8062b36f9fda232c0ca0f71d9d22f1e976 Mon Sep 17 00:00:00 2001 From: Andrew Davis <1709934+Savid@users.noreply.github.com> Date: Wed, 10 Jun 2026 17:21:11 +1000 Subject: [PATCH] ci: pin pnpm version in goreleaser workflow Same failure as the vet workflow: pnpm/action-setup reads the repo-root package.json for a packageManager pin, but ours lives in web/package.json, so tag releases died at "Set up pnpm". Pin pnpm explicitly and move setup-go/setup-node to current releases. Co-Authored-By: Claude Fable 5 --- .github/workflows/goreleaser.yaml | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/.github/workflows/goreleaser.yaml b/.github/workflows/goreleaser.yaml index 3cf92b1..adb691c 100644 --- a/.github/workflows/goreleaser.yaml +++ b/.github/workflows/goreleaser.yaml @@ -36,12 +36,16 @@ jobs: echo "Release suffix: $RELEASE_SUFFIX" - name: Set up Go - uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0 + uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0 with: go-version: '1.26' - name: Set up pnpm - uses: pnpm/action-setup@v4 - - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3.8.2 + uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 + with: + # the packageManager pin lives in web/package.json, not the repo root + version: 10.30.1 + run_install: false + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 name: Set up Node with: node-version: 22