Skip to content

Clarify that package_json_file is relative to GITHUB_WORKSPACE#184

Merged
zkochan merged 2 commits intopnpm:masterfrom
chris-martin:patch-1
Dec 7, 2025
Merged

Clarify that package_json_file is relative to GITHUB_WORKSPACE#184
zkochan merged 2 commits intopnpm:masterfrom
chris-martin:patch-1

Conversation

@chris-martin
Copy link
Contributor

Clarify the description for package_json_file parameter to specify that the path must be relative to the repository root.

If, for example, you give an absolute file path, it doesn't work, because the provided path will always be prefixed by GITHUB_WORKSPACE at

const content = readFileSync(path.join(GITHUB_WORKSPACE, packageJsonFile), 'utf8');

Clarify the description for package_json_file parameter to specify that the path must be relative to the repository root.
Copy link
Collaborator

@KSXGitHub KSXGitHub left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Alternatively, you can replace path.join with path.resolve.

@zkochan zkochan merged commit ee7b871 into pnpm:master Dec 7, 2025
LinnJS added a commit to suncoast-innovation-guild/action-setup that referenced this pull request Feb 15, 2026
* Fix multiline run_install example in README.md (pnpm#167)

* Remove --frozen-lockfile from examples (pnpm#171)

* feat: support installation from custom NPM registry (pnpm#179)

copy .npmrc from GitHub workspace if it exists so that PNPM respects custom
registry configurations when self-installing

* Update README.md (pnpm#175)

fix the string run_install example

* Remove unused `@types/node-fetch` dependency (pnpm#186)

* Clarify that package_json_file is relative to GITHUB_WORKSPACE (pnpm#184)

* Clarify that package_json_file is relative to GITHUB_WORKSPACE

Clarify the description for package_json_file parameter to specify that the path must be relative to the repository root.

* Apply suggestion from @zkochan

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>

* feat: store caching (pnpm#188)

* add pnpm store caching

* style: format

* no semicolons
* no star imports
* import order

* style: no star imports

---------

Co-authored-by: khai96_ <hvksmr1996@gmail.com>

* refactor: remove star imports (pnpm#196)

* fix(ci): exclude macos (pnpm#197)

* ci: pin github actions (pnpm#199)

* fix: regenerate lockfile to match package.json overrides

* fix(security): override fast-xml-parser to >=5.3.4

Resolves GHSA-37qj-frw5-hhjh (RangeError DoS via numeric entities)
in transitive dependency @actions/cache > @azure/storage-blob >
@azure/core-xml > fast-xml-parser.

* fix: resolve lint, build, and security audit failures

- Fix prefer-const lint error in cache-restore/run.ts
- Override undici to >=6.23.0 (GHSA-g9mf-h72j-4rw9)
- Rebuild dist to match source changes

* fix(ci): exclude dist from CodeQL analysis

dist/index.js is generated by ncc bundling — CodeQL flags dependency
code as security issues. Ignore the dist directory since it's not
source code.

---------

Co-authored-by: Matthias <matthias.dailey@gmail.com>
Co-authored-by: Adrian Riedel <Eynorey@users.noreply.github.com>
Co-authored-by: Roman Usherenko <roman.usherenko@gmail.com>
Co-authored-by: silverwind <me@silverwind.io>
Co-authored-by: Chris Martin <ch.martin@gmail.com>
Co-authored-by: Zoltan Kochan <z@kochan.io>
Co-authored-by: Jeremiasz Major <jrh.mjr@gmail.com>
Co-authored-by: khai96_ <hvksmr1996@gmail.com>
Co-authored-by: Boosted-Bonobo <boostedbonobo1@outlook.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants