Skip to content

Fixed broken pnpm/action-setup pin and excluded workspace file from zip#75

Merged
aileen merged 1 commit into
mainfrom
fix-pnpm-action-pin-and-zip
Jun 10, 2026
Merged

Fixed broken pnpm/action-setup pin and excluded workspace file from zip#75
aileen merged 1 commit into
mainfrom
fix-pnpm-action-pin-and-zip

Conversation

@aileen

@aileen aileen commented Jun 10, 2026

Copy link
Copy Markdown
Member

Summary

  • Replaced the pnpm/action-setup digest ac6db6d3c1f721f886538a378a2d73e85697340a with 0e279bb959325dab635dd2c09392533439d90093 in both workflow files. The old digest no longer exists upstream (GitHub returns HTTP 422 for it), so any workflow job using it fails to resolve the action. The new digest is the verified SHA behind the current v6/v6.0.8 tag. Discovered during the Changed package manager from yarn to pnpm Themes#529 pnpm migration review.
  • Added '!pnpm-workspace.yaml' to the gulp zip task's exclusions. The file is development tooling (pnpm 11 build-script approvals) and does not belong in the installable theme zip.

Verification

  • pnpm install --frozen-lockfile succeeds.
  • pnpm zip builds dist/tribeca.zip; unzip -l dist/tribeca.zip | grep -i pnpm returns no matches (no pnpm files in the zip, 50 files total).
  • Diff is scoped to the two workflow files and gulpfile.js only.

The pnpm/action-setup digest ac6db6d3c1f721f886538a378a2d73e85697340a no
longer exists upstream — GitHub returns HTTP 422 for it, so any workflow
job using it fails to resolve the action. Replaced it with
0e279bb959325dab635dd2c09392533439d90093, the verified digest behind the
current v6/v6.0.8 tag.

Also excluded pnpm-workspace.yaml from the installable theme zip: it is
development tooling (pnpm 11 build-script approvals), not theme content.

Discovered during the TryGhost/Themes#529 pnpm migration review.
@coderabbitai

coderabbitai Bot commented Jun 10, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@aileen, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 9 minutes and 20 seconds. Learn how PR review limits work.

Your organization has run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 133ca574-1e6a-457e-8888-c334350b7890

📥 Commits

Reviewing files that changed from the base of the PR and between 392c29b and 20f8df5.

📒 Files selected for processing (3)
  • .github/workflows/deploy-theme.yml
  • .github/workflows/test.yml
  • gulpfile.js
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix-pnpm-action-pin-and-zip

Comment @coderabbitai help to get the list of available commands and usage tips.

@aileen aileen merged commit 0a04ccf into main Jun 10, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant