Skip to content

Bump actions/setup-node from 4.0.3 to 4.0.4 #843

Bump actions/setup-node from 4.0.3 to 4.0.4

Bump actions/setup-node from 4.0.3 to 4.0.4 #843

Workflow file for this run

name: Config npm
on:
pull_request:
paths:
- .github/workflows/config-npm.yml
- package.json
- package-lock.json
push:
branches:
- main
paths:
- .github/workflows/config-npm.yml
- package.json
- package-lock.json
permissions: read-all
jobs:
package-json:
name: package.json
runs-on: ubuntu-22.04
steps:
- name: Harden runner
uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
with:
disable-sudo: true
egress-policy: block
allowed-endpoints: >
actions-results-receiver-production.githubapp.com:443
api.github.com:443
artifactcache.actions.githubusercontent.com:443
github.com:443
gitlab.com:443
nodejs.org:443
objects.githubusercontent.com:443
registry.npmjs.org:443
- name: Checkout repository
uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
- name: Install Node.js
uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
with:
cache: npm
node-version-file: .nvmrc
- name: Install dependencies
run: npm clean-install
- name: Validate package.json
run: npm run vet:package.json
package-lock-json:
name: package-lock.json
runs-on: ubuntu-22.04
steps:
- name: Harden runner
uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
with:
disable-sudo: true
egress-policy: block
allowed-endpoints: >
actions-results-receiver-production.githubapp.com:443
api.github.com:443
artifactcache.actions.githubusercontent.com:443
github.com:443
gitlab.com:443
nodejs.org:443
objects.githubusercontent.com:443
registry.npmjs.org:443
- name: Checkout repository
uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
- name: Install Node.js
uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
with:
cache: npm
node-version-file: .nvmrc
- name: Install dependencies
run: npm clean-install
- name: Validate package-lock.json
run: npm run vet:package-lock.json