Skip to content

ci: replace pnpm/action-setup with corepack (allowlist compliance) #18

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ANcpLua merged 1 commit into from
May 15, 2026
Merged

ci: replace pnpm/action-setup with corepack (allowlist compliance) #18

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 8 additions & 6 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -103,9 +103,10 @@ jobs:
working-directory: PaperlessUI.Angular
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
with:
version: 10
- name: Activate pnpm via corepack
run: |
corepack enable
corepack prepare pnpm@10.30.2 --activate
Copy link
Copy Markdown

@codacy-production codacy-production Bot May 15, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔴 HIGH RISK

The version 10.30.2 is not a valid pnpm release. As of the current release cycle, pnpm 10 has not reached a '30.x' minor version. Attempting to prepare a non-existent version will cause the workflow to fail.

Suggested change
corepack prepare pnpm@10.30.2 --activate
corepack prepare pnpm@10 --activate

- uses: actions/setup-node@v4
with:
node-version: 22
Expand All @@ -123,9 +124,10 @@ jobs:
working-directory: PaperlessUI.React
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
with:
version: 10
- name: Activate pnpm via corepack
run: |
corepack enable
corepack prepare pnpm@10.30.2 --activate
Copy link
Copy Markdown

@codacy-production codacy-production Bot May 15, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔴 HIGH RISK

The version 10.30.2 is invalid and will cause the frontend-react job to fail. Use pnpm@10 to ensure the workflow uses a valid version from the v10 major release.

Suggested change
corepack prepare pnpm@10.30.2 --activate
corepack prepare pnpm@10 --activate

- uses: actions/setup-node@v4
with:
node-version: 22
Expand Down
Loading