From 0c1b35b7374afc2a20835b56971763e6e021ef18 Mon Sep 17 00:00:00 2001 From: julien Date: Sat, 16 May 2026 10:33:32 +0200 Subject: [PATCH 1/2] fix(ci): pin release job to Node 22.21 to fix npm global upgrade MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Node 22.22.2's bundled npm 10.9.5 ships broken in the GitHub Actions toolcache — `npm install -g` fails with `Cannot find module 'promise-retry'`. This blocks the `Upgrade npm for OIDC trusted publishing` step in the release job. Pin only the release job to 22.21.0 (whose bundled npm 10.9.3 still works); other jobs use yarn and aren't affected. --- .github/workflows/ci.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index af064ca..0a2ae2f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -145,7 +145,10 @@ jobs: - name: Setup Node.js uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0 with: - node-version: 22 + # Pinned: Node 22.22.2's bundled npm 10.9.5 ships broken in the GH + # toolcache (missing `promise-retry`), so `npm install -g` aborts + # before we can upgrade for OIDC trusted publishing. + node-version: 22.21.0 - name: Restore node_modules uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 From 038186ce2eb4fd3385cf566305fb2ddf381ba2c5 Mon Sep 17 00:00:00 2001 From: julien Date: Sat, 16 May 2026 10:37:28 +0200 Subject: [PATCH 2/2] chore: shorten ci comment --- .github/workflows/ci.yml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0a2ae2f..d781689 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -145,9 +145,7 @@ jobs: - name: Setup Node.js uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0 with: - # Pinned: Node 22.22.2's bundled npm 10.9.5 ships broken in the GH - # toolcache (missing `promise-retry`), so `npm install -g` aborts - # before we can upgrade for OIDC trusted publishing. + # 22.22.2's bundled npm is broken in the GH toolcache (missing `promise-retry`) node-version: 22.21.0 - name: Restore node_modules