Skip to content

Commit cb0c6c4

Browse files
committed
ci(corepack): pinned the expected dev version of npm and explicitly used it for audit signatures
1 parent c25c252 commit cb0c6c4

File tree

3 files changed

+4
-3
lines changed

3 files changed

+4
-3
lines changed

.github/workflows/release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
node-version: lts/*
2525
cache: npm
2626
- run: npm clean-install
27-
- run: npm audit signatures
27+
- run: corepack npm audit signatures
2828
- run: npx semantic-release
2929
env:
3030
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/test.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
node-version: "lts/*"
4242
cache: npm
4343
- run: npm clean-install
44-
- run: npm audit signatures
44+
- run: corepack npm audit signatures
4545
- name: Ensure dependencies are compatible with the engines range
4646
run: npx ls-engines
4747
- run: npm run lint

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -97,5 +97,6 @@
9797
"extends": [
9898
"github>semantic-release/.github:renovate-config"
9999
]
100-
}
100+
},
101+
"packageManager": "[email protected]+sha256.17ca6e08e7633b624e8f870db81a78f46afe119de62bcaf0a7407574139198fc"
101102
}

0 commit comments

Comments
 (0)