Roo-Code/.github/actions/setup-node-pnpm/action.yml
Peter Dave Hello 21ae77e69f chore: Upgrade Node.js to v20.20.0 for security enhancements
This commit upgrades Node.js from v20.19.2 to v20.20.0.

This release includes security patches that address known
vulnerabilities, improving the overall security posture.

Reference:
- https://nodejs.org/en/blog/release/v20.20.0/
- https://nodejs.org/en/blog/vulnerability/january-2026-dos-mitigation-async-hooks/
2026-01-26 02:32:58 +08:00

48 lines
1.5 KiB
YAML

name: "Setup Node.js and pnpm"
description: "Sets up Node.js and pnpm with caching and installs dependencies"
inputs:
node-version:
description: "Node.js version to use"
required: false
default: "20.20.0"
pnpm-version:
description: "pnpm version to use"
required: false
default: "10.8.1"
skip-install:
description: "Skip dependency installation"
required: false
default: "false"
install-args:
description: "Additional arguments for pnpm install"
required: false
default: ""
runs:
using: "composite"
steps:
- name: Install pnpm
uses: pnpm/action-setup@v4
with:
version: ${{ inputs.pnpm-version }}
- name: Get pnpm store directory
shell: bash
run: |
echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
- name: Setup pnpm cache
uses: actions/cache@v4
with:
path: ${{ env.STORE_PATH }}
key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
restore-keys: |
${{ runner.os }}-pnpm-store-
- name: Setup Node.js
uses: actions/setup-node@v4
with:
node-version: ${{ inputs.node-version }}
- name: Install dependencies
if: ${{ inputs.skip-install != 'true' }}
shell: bash
run: pnpm install ${{ inputs.install-args }}