From 7e5611473638f966efa339c137770b5e0ef32af5 Mon Sep 17 00:00:00 2001 From: S2D2 Date: Mon, 26 Oct 2026 16:29:03 +0000 Subject: [PATCH] ci(SEC-104): read the Node version from package.json in workflows Workflows pinned Node separately from the repo's own version source, so every Node bump had to be made twice. setup-node now reads node-version-file: package.json, which makes package.json the only place to change. - .github/workflows/release.yml: 1 step (was 22.23.4). Requested by guillaume@stackone.com in Slack. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/build.yml | 7 ++----- .github/workflows/release.yml | 2 +- 2 files changed, 3 insertions(+), 6 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index a9c37dd..abafa3e 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -5,15 +5,12 @@ on: push jobs: build: runs-on: ubuntu-latest - strategy: - matrix: - node-version: [22.23.4] steps: - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - - name: Use Node.js ${{matrix.node-version}} + - name: Use Node.js uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: - node-version: ${{matrix.node-version}} + node-version-file: package.json cache: 'npm' - name: Install dependencies run: npm ci diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 094befa..3b24233 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -13,7 +13,7 @@ jobs: - name: Setup Node.js uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: - node-version: 22.23.4 + node-version-file: package.json - name: Install dependencies run: npm ci - name: Lint