From bdaa9f2aa0c123131dce4dd8b4c58bbc250d1708 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 17 Apr 2026 14:15:17 +0000 Subject: [PATCH 1/2] chore: bump pnpm/action-setup from 4 to 6 Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4 to 6. - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/v4...v6) --- updated-dependencies: - dependency-name: pnpm/action-setup dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build.yml | 2 +- .github/workflows/lint.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/test-action.yml | 4 ++-- .github/workflows/verify-build.yml | 2 +- 5 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index ab9b317..1f91855 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -10,7 +10,7 @@ jobs: with: node-version: "20" - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@v6 with: version: 10.33.0 diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 662af4f..41710d3 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -16,7 +16,7 @@ jobs: with: node-version: "20" - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@v6 with: version: 10.33.0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 491274d..101711a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -51,7 +51,7 @@ jobs: node-version: "20" - name: Setup pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@v6 with: version: 10.33.0 diff --git a/.github/workflows/test-action.yml b/.github/workflows/test-action.yml index 6c67806..4da2123 100644 --- a/.github/workflows/test-action.yml +++ b/.github/workflows/test-action.yml @@ -15,7 +15,7 @@ jobs: uses: actions/checkout@v6 - name: Setup pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@v6 with: version: 10.33.0 @@ -69,7 +69,7 @@ jobs: uses: actions/checkout@v6 - name: Setup pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@v6 with: version: 10.33.0 diff --git a/.github/workflows/verify-build.yml b/.github/workflows/verify-build.yml index 5925fa2..159d16c 100644 --- a/.github/workflows/verify-build.yml +++ b/.github/workflows/verify-build.yml @@ -21,7 +21,7 @@ jobs: node-version: "20" - name: Setup pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@v6 with: version: 10.33.0 From e0d4b2c47b1d45a9dc562e5a549d2e2b0655155d Mon Sep 17 00:00:00 2001 From: taha-au Date: Sat, 25 Apr 2026 13:40:06 +0000 Subject: [PATCH 2/2] ci: keep pnpm/action-setup on v4 due to upstream regression pnpm/action-setup v6 ships a pnpm 11 bootstrap that does not honor the requested 'version' input, leaving pnpm 11 on PATH after the action finishes. With this repo's engines.pnpm: 10.33.0 constraint, that breaks every 'pnpm install' step with ERR_PNPM_UNSUPPORTED_ENGINE. Tracking upstream: - https://github.com/pnpm/action-setup/issues/225 - https://github.com/pnpm/action-setup/issues/231 Revert all workflows to v4 and tell Dependabot to ignore v5+ until upstream stabilizes. Co-authored-by: Codesmith --- .github/dependabot.yaml | 9 +++++++++ .github/workflows/build.yml | 2 +- .github/workflows/lint.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/test-action.yml | 4 ++-- .github/workflows/verify-build.yml | 2 +- 6 files changed, 15 insertions(+), 6 deletions(-) diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml index 3dc1447..76827e2 100644 --- a/.github/dependabot.yaml +++ b/.github/dependabot.yaml @@ -7,6 +7,15 @@ updates: commit-message: prefix: chore labels: [] + ignore: + # pnpm/action-setup v5 and v6 ship a pnpm 11 bootstrap that fails to + # honor the requested `version:` input and collides with this repo's + # `engines.pnpm: 10.33.0` constraint, breaking `pnpm install` with + # ERR_PNPM_UNSUPPORTED_ENGINE. + # See https://github.com/pnpm/action-setup/issues/225 and #231. + # Stay on v4 until upstream fixes are released. + - dependency-name: pnpm/action-setup + versions: [">=5"] - package-ecosystem: npm directory: / diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 1f91855..ab9b317 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -10,7 +10,7 @@ jobs: with: node-version: "20" - - uses: pnpm/action-setup@v6 + - uses: pnpm/action-setup@v4 with: version: 10.33.0 diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 41710d3..662af4f 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -16,7 +16,7 @@ jobs: with: node-version: "20" - - uses: pnpm/action-setup@v6 + - uses: pnpm/action-setup@v4 with: version: 10.33.0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 101711a..491274d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -51,7 +51,7 @@ jobs: node-version: "20" - name: Setup pnpm - uses: pnpm/action-setup@v6 + uses: pnpm/action-setup@v4 with: version: 10.33.0 diff --git a/.github/workflows/test-action.yml b/.github/workflows/test-action.yml index 4da2123..6c67806 100644 --- a/.github/workflows/test-action.yml +++ b/.github/workflows/test-action.yml @@ -15,7 +15,7 @@ jobs: uses: actions/checkout@v6 - name: Setup pnpm - uses: pnpm/action-setup@v6 + uses: pnpm/action-setup@v4 with: version: 10.33.0 @@ -69,7 +69,7 @@ jobs: uses: actions/checkout@v6 - name: Setup pnpm - uses: pnpm/action-setup@v6 + uses: pnpm/action-setup@v4 with: version: 10.33.0 diff --git a/.github/workflows/verify-build.yml b/.github/workflows/verify-build.yml index 159d16c..5925fa2 100644 --- a/.github/workflows/verify-build.yml +++ b/.github/workflows/verify-build.yml @@ -21,7 +21,7 @@ jobs: node-version: "20" - name: Setup pnpm - uses: pnpm/action-setup@v6 + uses: pnpm/action-setup@v4 with: version: 10.33.0