LiteSun opened a new pull request, #3474: URL: https://github.com/apache/apisix-dashboard/pull/3474
**Why submit this pull request?** - [x] Bugfix - [ ] New feature provided - [ ] Improve performance - [ ] Backport patches **What changes will this PR take into?** Per the [ASF GitHub Actions policy](https://infra.apache.org/github-actions-policy.html), third-party actions must be referenced by commit hash. Apache Infra plans to enforce this for `pnpm/action-setup` (apache/infrastructure-actions#1193), which would break our workflows that still use tags. - Pin `pnpm/action-setup` in `lint.yml` (was `@v4`) and `e2e.yml` (was `@v5`) to `ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0`, the hash approved in apache/infrastructure-actions. The other approved hash, for v6.0.10, expires on 2026-12-01. - v6 still accepts the `run_install` input used here, and still reads the pnpm version from `packageManager` in `package.json`. - The existing `github-actions` entry in `.github/dependabot.yml` keeps the pinned hash up to date, so no new automation is needed. **Related issues** fix #3468 **Checklist:** - [x] Did you explain what problem does this PR solve? Or what new features have been added? - [ ] Have you added corresponding test cases? (CI-only change; the Lint and E2E workflows on this PR exercise it) - [ ] Have you modified the corresponding document? (not needed) - [x] Is this PR backward compatible? If it is not backward compatible, please discuss on the mailing list first 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
