From cc7b36dc3c3a58ea122d93d6731f2a21c175fcc4 Mon Sep 17 00:00:00 2001 From: Alexey Fedorov Date: Mon, 13 Jul 2026 09:48:07 -0700 Subject: [PATCH 1/3] fix(ci): pin pnpm/action-setup to 11.11.0 in BetterDependabot workflow The BetterDependabot scheduled workflow used version: latest for pnpm/action-setup. On 2026-07-13 that resolved to pnpm 11.12.0, whose self-installer crashes with "Cannot use 'in' operator to search for 'integrity' in undefined" while switching pnpm versions, failing the job before any dependency install or build step runs (run 29232206286). Pin to the last known-good release (11.11.0) instead of trusting "latest", matching how originGUI-build.yml already pins its pnpm version. --- .github/workflows/BetterDependabot.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/BetterDependabot.yml b/.github/workflows/BetterDependabot.yml index b1d4394..024c147 100644 --- a/.github/workflows/BetterDependabot.yml +++ b/.github/workflows/BetterDependabot.yml @@ -20,9 +20,15 @@ jobs: with: node-version: '22' + # Pinned instead of "latest": pnpm 11.12.0 (published 2026-07-13) ships a + # broken self-installer that crashes with + # "Cannot use 'in' operator to search for 'integrity' in undefined" + # whenever action-setup switches to it (see run 29232206286). Pin to the + # last known-good release until upstream ships a fix, and bump this + # explicitly going forward instead of trusting "latest". - uses: pnpm/action-setup@v6 with: - version: latest + version: 11.11.0 - name: Install (sync lockfile state) run: pnpm install --no-frozen-lockfile --ignore-scripts From e094b5815772997135045a79ca0888096ce89d28 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Mon, 13 Jul 2026 16:49:00 +0000 Subject: [PATCH 2/3] chore: update dependencies --- originGUI/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/originGUI/package.json b/originGUI/package.json index 27e1973..350832e 100644 --- a/originGUI/package.json +++ b/originGUI/package.json @@ -28,7 +28,7 @@ "eslint-plugin-import": "^2.32.0", "eslint-plugin-n": "^18.2.2", "eslint-plugin-promise": "^7.3.0", - "postcss": "^8.5.16", + "postcss": "^8.5.17", "sass": "^1.101.0", "socket.io": "^4.8.3", "socket.io-client": "^4.8.3", From d4d26061b98ba8a3aba2318f5a323c9828d75eff Mon Sep 17 00:00:00 2001 From: Alexey Fedorov Date: Mon, 13 Jul 2026 09:57:47 -0700 Subject: [PATCH 3/3] style(ci): quote pinned pnpm version in BetterDependabot workflow Address Copilot review feedback on PR #26 by quoting the pnpm version pin so it's unambiguously treated as a string, consistent with the node-version quoting style already used in this workflow. --- .github/workflows/BetterDependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/BetterDependabot.yml b/.github/workflows/BetterDependabot.yml index 024c147..91ad572 100644 --- a/.github/workflows/BetterDependabot.yml +++ b/.github/workflows/BetterDependabot.yml @@ -28,7 +28,7 @@ jobs: # explicitly going forward instead of trusting "latest". - uses: pnpm/action-setup@v6 with: - version: 11.11.0 + version: '11.11.0' - name: Install (sync lockfile state) run: pnpm install --no-frozen-lockfile --ignore-scripts