mirror of
https://github.com/tiennm99/loto.git
synced 2026-10-13 14:16:10 +00:00
tiennm99
1c1bab8733
Replace pnpm-lock.yaml with package-lock.json and drop pnpm-workspace.yaml. The three security overrides move to package.json#overrides, which npm reads natively; allowBuilds for esbuild is unnecessary because npm runs dependency build scripts by default. android/build:web drove the web build through corepack pnpm, so it would have broken once web/pnpm-lock.yaml was gone. It now uses npm --prefix. Fresh resolution picks up patched versions the old lockfile had pinned below, so npm audit reports no advisories where pnpm audit reported eight.
19 lines
495 B
YAML
19 lines
495 B
YAML
name: Set up web toolchain
|
|
description: >
|
|
Installs Node, then restores web/ dependencies from the lockfile.
|
|
Node stays in lockstep with .github/actions/setup-android so the SvelteKit
|
|
app is tested and bundled into the APK on the same runtime.
|
|
|
|
runs:
|
|
using: composite
|
|
steps:
|
|
- uses: actions/setup-node@v7
|
|
with:
|
|
node-version: '24'
|
|
cache: npm
|
|
cache-dependency-path: web/package-lock.json
|
|
|
|
- run: npm ci
|
|
shell: bash
|
|
working-directory: web
|