From 81bcc5ce57d63f6d888d4ca0045cb358532a1865 Mon Sep 17 00:00:00 2001 From: "Lutar, Stephen P." Date: Thu, 13 Aug 2026 05:18:45 -0400 Subject: [PATCH] fix(ci): correct pnpm action version comments Align all 20 workflow comments with the immutable pnpm/action-setup v6.0.10 commit. Executable refs and parsed workflow semantics are unchanged. Verification: - git diff --check - parsed YAML semantic identity across 16 workflows - exact action refs unchanged and SHA-pinned - Gitleaks 8.21.2: no unallowlisted findings across 5,315 commits - project scanner: clean; 15 tests passed - local typecheck: inconclusive after a 10-minute timeout Workcell: PR-583-comment-correction Signed-off-by: Lutar, Stephen P. --- .github/workflows/a11y.yml | 2 +- .github/workflows/audit-full.yml | 2 +- .github/workflows/build.yml | 2 +- .github/workflows/ci.yml | 4 ++-- .github/workflows/codex-kernel-verify.yml | 2 +- .github/workflows/commitlint.yml | 2 +- .github/workflows/e2e.yml | 2 +- .github/workflows/lighthouse.yml | 2 +- .github/workflows/npm-public-publish.yml | 2 +- .github/workflows/npm-publish.yml | 2 +- .github/workflows/post-deploy-smoke.yml | 2 +- .github/workflows/readme-qa.yml | 2 +- .github/workflows/repro-check.yml | 2 +- .github/workflows/security.yml | 6 +++--- .github/workflows/tests.yml | 4 ++-- .github/workflows/truth-drift.yml | 2 +- 16 files changed, 20 insertions(+), 20 deletions(-) diff --git a/.github/workflows/a11y.yml b/.github/workflows/a11y.yml index d43708f2c..d5ab65a8c 100644 --- a/.github/workflows/a11y.yml +++ b/.github/workflows/a11y.yml @@ -58,7 +58,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: { node-version: '24', cache: 'pnpm' } diff --git a/.github/workflows/audit-full.yml b/.github/workflows/audit-full.yml index 9f9e98938..65c4028c9 100644 --- a/.github/workflows/audit-full.yml +++ b/.github/workflows/audit-full.yml @@ -34,7 +34,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: '24' diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 96f9c56d2..f081c37da 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -25,7 +25,7 @@ jobs: contents: read steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: { node-version: '24', cache: 'pnpm' } - run: pnpm install --no-frozen-lockfile --prefer-offline diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c2e4a8bf4..c990f4f10 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -51,7 +51,7 @@ jobs: contents: read steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: { node-version: '24', cache: 'pnpm' } - run: pnpm install --frozen-lockfile @@ -67,7 +67,7 @@ jobs: contents: read steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: { node-version: '24', cache: 'pnpm' } - name: Install dependencies (skip optional onnxruntime download) diff --git a/.github/workflows/codex-kernel-verify.yml b/.github/workflows/codex-kernel-verify.yml index ef0751d7a..a2f9d9ea0 100644 --- a/.github/workflows/codex-kernel-verify.yml +++ b/.github/workflows/codex-kernel-verify.yml @@ -50,7 +50,7 @@ jobs: contents: read steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: { node-version: '24', cache: 'pnpm' } diff --git a/.github/workflows/commitlint.yml b/.github/workflows/commitlint.yml index 78caba5d7..7278051f1 100644 --- a/.github/workflows/commitlint.yml +++ b/.github/workflows/commitlint.yml @@ -26,7 +26,7 @@ jobs: with: fetch-depth: 0 - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: { node-version: '24', cache: 'pnpm' } diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml index d15860af6..82b0cd01a 100644 --- a/.github/workflows/e2e.yml +++ b/.github/workflows/e2e.yml @@ -57,7 +57,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: { node-version: '24', cache: 'pnpm' } diff --git a/.github/workflows/lighthouse.yml b/.github/workflows/lighthouse.yml index 72b9a5ec6..12d422ae4 100644 --- a/.github/workflows/lighthouse.yml +++ b/.github/workflows/lighthouse.yml @@ -58,7 +58,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: { node-version: '24', cache: 'pnpm' } diff --git a/.github/workflows/npm-public-publish.yml b/.github/workflows/npm-public-publish.yml index 7b8b57462..b7be4cc57 100644 --- a/.github/workflows/npm-public-publish.yml +++ b/.github/workflows/npm-public-publish.yml @@ -64,7 +64,7 @@ jobs: fi - name: Setup pnpm - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - name: Setup Node.js for npm trusted publishing uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml index a269fb475..93fe19367 100644 --- a/.github/workflows/npm-publish.yml +++ b/.github/workflows/npm-publish.yml @@ -28,7 +28,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup pnpm - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - name: Setup Node.js uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: diff --git a/.github/workflows/post-deploy-smoke.yml b/.github/workflows/post-deploy-smoke.yml index da871de20..03d5c0539 100644 --- a/.github/workflows/post-deploy-smoke.yml +++ b/.github/workflows/post-deploy-smoke.yml @@ -88,7 +88,7 @@ jobs: with: ref: $WORKFLOW_RUN_HEAD_SHA - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: { node-version: "24", cache: "pnpm" } diff --git a/.github/workflows/readme-qa.yml b/.github/workflows/readme-qa.yml index 1ced09f48..9abdf7b59 100644 --- a/.github/workflows/readme-qa.yml +++ b/.github/workflows/readme-qa.yml @@ -50,7 +50,7 @@ jobs: node-version: "24" - name: Setup pnpm - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - name: Install dependencies run: pnpm install --frozen-lockfile diff --git a/.github/workflows/repro-check.yml b/.github/workflows/repro-check.yml index 08ecbbf57..53c656588 100644 --- a/.github/workflows/repro-check.yml +++ b/.github/workflows/repro-check.yml @@ -28,7 +28,7 @@ jobs: # explicit setup the runner's default Node is used and every # `pnpm install` aborts with ERR_PNPM_UNSUPPORTED_ENGINE before the # build can run. Pin Node 24 to match the rest of the CI matrix. - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: { node-version: '24', cache: 'pnpm' } diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 7d2ec8574..c527fad15 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -29,7 +29,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup pnpm - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - name: Setup Node.js uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: @@ -121,7 +121,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup pnpm - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - name: Setup Node.js uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: @@ -141,7 +141,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup pnpm - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - name: Setup Node.js uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index d2bcfec9c..651cf23e3 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -28,7 +28,7 @@ jobs: contents: read steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: { node-version: '24', cache: 'pnpm' } - name: Install dependencies (skip ONNXRuntime download to avoid postinstall network flake) @@ -52,7 +52,7 @@ jobs: - sentra-runtime steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 — repinned 2026-04-30 (fe52bf0a force-deleted upstream) + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: { node-version: '24', cache: 'pnpm' } - name: Install dependencies (skip ONNXRuntime download to avoid postinstall network flake) diff --git a/.github/workflows/truth-drift.yml b/.github/workflows/truth-drift.yml index c71585956..f941b82f6 100644 --- a/.github/workflows/truth-drift.yml +++ b/.github/workflows/truth-drift.yml @@ -34,7 +34,7 @@ jobs: fetch-depth: 0 - name: Install pnpm - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 with: version: 10.26.1