mirror of
https://github.com/n8n-io/n8n.git
synced 2026-10-17 05:29:44 +02:00
bd11c105e1
pnpm 11 re-applies minimumReleaseAge/trustPolicy to every lockfile entry on each install (pnpm/pnpm#12114). This causes a registry metadata sweep for the full tree, even with a frozen lockfile. The SafeChain proxy makes the sweep heavier: its age filter rewrites the Accept header and forces full packuments. One slow fetch can stall past the 600s install timeout (exit 124). Two changes to setup-nodejs: - Persist the pnpm metadata cache (`pnpm cache path`) across jobs. An unchanged lockfile skips the re-verification. A changed lockfile revalidates only the delta. - Pass `--safe-chain-skip-minimum-package-age` to the install command. pnpm enforces a stricter native minimumReleaseAge. SafeChain malware blocking is unaffected. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| actions | ||
| ISSUE_TEMPLATE | ||
| poutine-rules | ||
| scripts | ||
| test-metrics | ||
| workflows | ||
| actionlint.yml | ||
| CI-TELEMETRY.md | ||
| CLAUDE.md | ||
| CODEOWNERS | ||
| DEVELOPING_V3.md | ||
| docker-compose.yml | ||
| OWNERS | ||
| pull_request_template.md | ||
| pull_request_title_conventions.md | ||
| WORKFLOWS.md | ||