diff --git a/.github/workflows/e2e-cache.yml b/.github/workflows/e2e-cache.yml index ddedf39b..73e48d8d 100644 --- a/.github/workflows/e2e-cache.yml +++ b/.github/workflows/e2e-cache.yml @@ -21,7 +21,7 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] node-version: [20, 22, 24] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Clean global cache run: npm cache clean --force - name: Setup Node @@ -44,7 +44,7 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] node-version: [20, 22, 24] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Install pnpm uses: pnpm/action-setup@v4 with: @@ -77,7 +77,7 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] node-version: [20, 22, 24] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Yarn version run: yarn --version - name: Generate yarn file @@ -109,7 +109,7 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] node-version: [20, 22, 24] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Update yarn run: yarn set version 3.6.4 - name: Yarn version @@ -143,7 +143,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: prepare sub-projects run: __tests__/prepare-yarn-subprojects.sh yarn1 @@ -170,7 +170,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: prepare sub-projects run: __tests__/prepare-yarn-subprojects.sh keepcache keepcache @@ -197,7 +197,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: prepare sub-projects run: __tests__/prepare-yarn-subprojects.sh global @@ -224,7 +224,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: prepare sub-projects run: /bin/bash __tests__/prepare-yarn-subprojects.sh keepcache @@ -253,7 +253,7 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] node-version: [20, 22, 24] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Create package.json with packageManager field run: | echo '{ "name": "test-project", "version": "1.0.0", "packageManager": "npm@8.0.0" }' > package.json @@ -278,7 +278,7 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] node-version: [20, 22, 24] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Create package.json with devEngines field run: | echo '{ diff --git a/.github/workflows/proxy.yml b/.github/workflows/proxy.yml index c5493b59..e1112314 100644 --- a/.github/workflows/proxy.yml +++ b/.github/workflows/proxy.yml @@ -25,7 +25,7 @@ jobs: env: https_proxy: http://squid-proxy:3128 steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Clear tool cache run: rm -rf $RUNNER_TOOL_CACHE/* - name: Setup node 24 @@ -41,7 +41,7 @@ jobs: https_proxy: http://no-such-proxy:3128 no_proxy: api.github.com,github.com,nodejs.org,registry.npmjs.org,*.s3.amazonaws.com,s3.amazonaws.com steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Clear tool cache run: rm -rf $RUNNER_TOOL_CACHE/* - name: Setup node 24 diff --git a/.github/workflows/publish-immutable-actions.yml b/.github/workflows/publish-immutable-actions.yml index 52c7bc00..7f49c641 100644 --- a/.github/workflows/publish-immutable-actions.yml +++ b/.github/workflows/publish-immutable-actions.yml @@ -14,7 +14,7 @@ jobs: steps: - name: Checking out - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: Publish id: publish uses: actions/publish-immutable-action@v0.0.4 diff --git a/.github/workflows/versions.yml b/.github/workflows/versions.yml index 333e3a5b..275c042f 100644 --- a/.github/workflows/versions.yml +++ b/.github/workflows/versions.yml @@ -20,7 +20,7 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] node-version: [20, 22, 24] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Setup Node uses: ./ with: @@ -37,7 +37,7 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest-large] node-version: [lts/dubnium, lts/erbium, lts/fermium, lts/*, lts/-1] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Setup Node uses: ./ with: @@ -64,7 +64,7 @@ jobs: '20.0.0-v8-canary20221101e50e45c9f8' ] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Setup Node uses: ./ with: @@ -84,7 +84,7 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] node-version: [20-nightly, 25-nightly, 24.0.0-nightly] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Setup Node uses: ./ with: @@ -104,7 +104,7 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] node-version: [20.0.0-rc.1, 22.14.0-rc.1, 24.0.0-rc.4] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Setup Node uses: ./ with: @@ -124,7 +124,7 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] node-version: [20.10.0, 22.0.0, 24.9.0] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Setup Node uses: ./ with: @@ -141,7 +141,7 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] node-version: [20, 22, 24] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Setup Node and check latest uses: ./ with: @@ -160,7 +160,7 @@ jobs: node-version-file: [.nvmrc, .tool-versions, .tool-versions-node, package.json] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Setup node from node version file uses: ./ with: @@ -175,7 +175,7 @@ jobs: matrix: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Setup node from node version file uses: ./ with: @@ -190,7 +190,7 @@ jobs: matrix: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Setup node from node version file uses: ./ with: @@ -206,7 +206,7 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large] node-version: [17, 19] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Setup Node from dist uses: ./ with: @@ -222,7 +222,7 @@ jobs: matrix: os: [ubuntu-latest, windows-latest, macos-latest-large] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 # test old versions which didn't have npm and layout different - name: Setup node 0.12.18 from dist uses: ./ @@ -235,7 +235,7 @@ jobs: arch: runs-on: windows-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Setup node 20 x86 from dist uses: ./ with: @@ -259,7 +259,7 @@ jobs: echo "LATEST_NODE_VERSION=$latestNodeVersion" >> $GITHUB_OUTPUT id: version shell: bash - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Setup Node uses: ./ with: diff --git a/docs/advanced-usage.md b/docs/advanced-usage.md index b436c096..1d0a1843 100644 --- a/docs/advanced-usage.md +++ b/docs/advanced-usage.md @@ -7,8 +7,6 @@ Most supported package managers recommend that you **always** commit the lockfi - Provides a facility for users to "time-travel" to previous states of `node_modules` without having to commit the directory itself. - Facilitates greater visibility of tree changes through readable source control diffs. -**However, for libraries, not using a lockfile may be preferable to ensure testing with the latest transitive dependencies. See the [Node.js Package Maintenance Working Group documentation on dependency management guidelines](https://github.com/nodejs/package-maintenance/blob/main/docs/dependency-management-guidelines.md#using-lockfiles) for a discussion of tradeoffs.** - In order to get the most out of using your lockfile on continuous integration follow the conventions outlined below for your respective package manager. ### NPM @@ -43,7 +41,7 @@ If you choose not to use a lockfile, you must ensure that **caching is disabled* To run without a lockfile: 1. Do not set the `cache` input. -2. If your `package.json` specifies a `packageManager` (which enables automatic caching in v5+), explicitly disable it: +2. If your `package.json` contains a ``packageManager` field set to npm (or devEngines.packageManager), automatic caching is enabled by default. Override this by setting package-manager-cache: false. ```yaml steps: diff --git a/package-lock.json b/package-lock.json index 035158b5..143fcb71 100644 --- a/package-lock.json +++ b/package-lock.json @@ -994,10 +994,11 @@ } }, "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": { - "version": "3.14.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", - "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==", + "version": "3.14.2", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz", + "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==", "dev": true, + "license": "MIT", "dependencies": { "argparse": "^1.0.7", "esprima": "^4.0.0" @@ -4315,10 +4316,11 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", - "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz", + "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==", "dev": true, + "license": "MIT", "dependencies": { "argparse": "^2.0.1" },