Zoltan Kochan
83d04aa232
Checking GitHub Actions for updates spawns `git ls-remote` against every repository referenced by the workflow files. That reaches the network in a way pnpm cannot validate up front, and it fails wherever GitHub is not reachable the way pnpm assumes: a GitHub Enterprise Server hosting the actions (pnpm/pnpm#13220), a container with a custom certificate authority (pnpm/pnpm#13254), an offline or proxied CI network. Both reports came within days of the feature shipping, and neither is fixable from pnpm's side, so the check no longer runs unless it is asked for. `pnpm outdated` and `pnpm update` — interactive or not, recursive or not — now read workflow files only with `--include-github-actions` or with `update.githubActions` set to `true`. `update.githubActions: false` keeps working; it is now equivalent to leaving the setting unset, so anyone who added it to silence the warnings needs no change. The opt-in rule lives in one place per stack (`shouldCheckGitHubActions` and `github_actions::opted_in`) and is shared by every call site, so the commands cannot drift apart again. `pnpm outdated` gained the `--include-github-actions` flag it was missing. Closes pnpm/pnpm#13254
788 B
788 B
@pnpm/deps.github-actions, @pnpm/deps.inspection.commands, @pnpm/installing.commands, @pnpm/types, pacquet, pnpm
| @pnpm/deps.github-actions | @pnpm/deps.inspection.commands | @pnpm/installing.commands | @pnpm/types | pacquet | pnpm |
|---|---|---|---|---|---|
| patch | patch | patch | patch | patch | patch |
Checking GitHub Actions dependencies for updates is now opt-in for every command. Neither pnpm outdated nor pnpm update reads the workflow files unless --include-github-actions is passed or update.githubActions is set to true in pnpm-workspace.yaml. Reading them runs git ls-remote against every referenced repository, which fails in environments where GitHub is not reachable the way pnpm assumes (a GitHub Enterprise Server, a custom certificate authority, or an offline network) #13254.
pnpm outdated accepts the --include-github-actions option too.