From 4af880a1f093428daa9fd1c9099022cccd76b409 Mon Sep 17 00:00:00 2001 From: Michael Seele Date: Wed, 6 May 2026 14:03:11 +0000 Subject: [PATCH 1/2] fix: use actions with node20 support node24 is not available in latest stackit runner containers Co-authored-by: Copilot --- pnpm-build/action.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pnpm-build/action.yml b/pnpm-build/action.yml index c0c02f1..e126461 100644 --- a/pnpm-build/action.yml +++ b/pnpm-build/action.yml @@ -36,16 +36,16 @@ runs: using: composite steps: # Pinned to commit SHA instead of a tag to prevent supply chain attacks. - # actions/setup-node v6.4.0 — https://code.forgejo.org/actions/setup-node/commits/tag/v6.4.0 + # actions/setup-node v4.4.0 — https://code.forgejo.org/actions/setup-node/commits/tag/v4.4.0 - name: Setup Node - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 with: node-version: ${{ inputs.node-version }} # Pinned to commit SHA instead of a tag to prevent supply chain attacks. - # pnpm/action-setup v6.0.3 — https://code.forgejo.org/pnpm/action-setup/commits/tag/v6.0.3 + # pnpm/action-setup v4.3.0 — https://code.forgejo.org/pnpm/action-setup/commits/tag/v4.3.0 - name: Install pnpm - uses: pnpm/action-setup@903f9c1a6ebcba6cf41d87230be49611ac97822e + uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 with: version: ${{ inputs.pnpm-version }} -- 2.49.1 From c87077f8b0f7715734f8049f5e272b86454a9790 Mon Sep 17 00:00:00 2001 From: Michael Seele Date: Wed, 6 May 2026 14:14:07 +0000 Subject: [PATCH 2/2] feat: add support for nexus npm registry Co-authored-by: Copilot --- pnpm-build/action.yml | 19 +++++++++++++++++-- 1 file changed, 17 insertions(+), 2 deletions(-) diff --git a/pnpm-build/action.yml b/pnpm-build/action.yml index e126461..4d3397e 100644 --- a/pnpm-build/action.yml +++ b/pnpm-build/action.yml @@ -19,6 +19,10 @@ inputs: description: JFrog npm auth token required: false default: "" + nexus-token: + description: Nexus npm auth token + required: false + default: "" run-scripts: description: Comma-separated list of pnpm run scripts required: false @@ -61,12 +65,23 @@ runs: key: ${{ runner.os }}-pnpm-${{ inputs.pnpm-version }}-${{ hashFiles(format('{0}/pnpm-lock.yaml', inputs.working-directory)) }} restore-keys: ${{ runner.os }}-pnpm-${{ inputs.pnpm-version }}- - - name: Configure pnpm registry authentication + - name: Configure JFrog registry authentication if: ${{ inputs.jfrog-token != '' }} shell: bash env: JFROG_TOKEN: ${{ inputs.jfrog-token }} - run: pnpm set //schmalz.jfrog.io/artifactory/api/npm/default-npm/:_authToken "$JFROG_TOKEN" + run: | + pnpm set registry https://schmalz.jfrog.io/artifactory/api/npm/default-npm/ + pnpm set //schmalz.jfrog.io/artifactory/api/npm/default-npm/:_authToken "$JFROG_TOKEN" + + - name: Configure Nexus registry authentication + if: ${{ inputs.nexus-token != '' }} + shell: bash + env: + NEXUS_TOKEN: ${{ inputs.nexus-token }} + run: | + pnpm set registry https://nexus.schmalzgroup.com/repository/npm-all/ + pnpm set //nexus.schmalzgroup.com/repository/npm-all/:_authToken "$NEXUS_TOKEN" - name: Build shell: bash -- 2.49.1