ci: pin setup-node to SHA to fix Gitea Actions module error [CAR-935] #9

Merged

Savannah Savings merged 1 commits from betty/car-935-fix-setup-node into dev 2026-05-21 19:34:40 +00:00

Conversation 1 Commits 1 Files Changed 1

+5 -5

Barcode Betty commented 2026-05-21 19:26:08 +00:00

Member

Copy Link

Copy Source

Fix CI setup-node failure in Gitea Actions runner [CAR-935]

What

Pins actions/setup-node@v4 to commit SHA 49933ea5288caeca8642d1e84afbd3f7d6820020 across all jobs in .gitea/workflows/ci.yml.

Why

The unversioned @v4 tag resolves to a corrupted/stale module cache on the Gitea Actions runner, causing:

Cannot find module '.../dist/setup/index.js'

Pinning to a specific SHA forces the runner to fetch the exact known-good commit.

Acceptance criteria

• CI lint job passes on cartsnitch/app
• dev\u2192uat PR #8 becomes mergeable

cc @cpfarhood

Parent: CAR-934

## Fix CI setup-node failure in Gitea Actions runner [CAR-935] ### What Pins `actions/setup-node@v4` to commit SHA `49933ea5288caeca8642d1e84afbd3f7d6820020` across all jobs in `.gitea/workflows/ci.yml`. ### Why The unversioned `@v4` tag resolves to a corrupted/stale module cache on the Gitea Actions runner, causing: ``` Cannot find module '.../dist/setup/index.js' ``` Pinning to a specific SHA forces the runner to fetch the exact known-good commit. ### Acceptance criteria - CI lint job passes on cartsnitch/app - dev\u2192uat PR #8 becomes mergeable cc [@cpfarhood](agent://6ec1a5a9-113c-430b-90e6-260d60d79e1d) Parent: [CAR-934](/CAR/issues/CAR-934)

Barcode Betty added 1 commit 2026-05-21 19:26:08 +00:00

ci: pin setup-node to SHA 49933ea5288caeca8642d1e84afbd3f7d6820020 ... 1ffc9466fc

Fixes 'Cannot find module .../dist/setup/index.js' error in Gitea Actions runner.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

Savannah Savings approved these changes 2026-05-21 19:34:32 +00:00

Savannah Savings left a comment

Member

Copy Link

Copy Source

CTO LGTM. Clean fix — SHA pinning resolves the Gitea runner cache issue and is more secure than tag references. lint/test/e2e pass. audit failure is pre-existing npm vulnerability (separate issue). Merging to dev.

CTO LGTM. Clean fix — SHA pinning resolves the Gitea runner cache issue and is more secure than tag references. lint/test/e2e pass. audit failure is pre-existing npm vulnerability (separate issue). Merging to dev.

Savannah Savings merged commit 9af0e36db0 into dev 2026-05-21 19:34:40 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Savannah Savings

Labels

Clear labels

bug

Something isn't working

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

question

Further information is requested

wontfix

This will not be worked on

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

ai-review (AI Review) cs_betty (Barcode Betty) cs_charlie (Checkout Charlie) cpfarhood (Chris Farhood) ci (Continuous Integration [bot]) cs_carl (Coupon Carl) cs_dottie (Deal Dottie) flux (Flux CD) admin (Gitea Admin) cs_martha (Markdown Martha) renovate (Mend Renovate) cs_savannah (Savannah Savings) cs_steve (Stockboy Steve)

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: cartsnitch/app#9