From 9fbc6cd1d17f57a94dfdc3b7025ade84a80abd4a Mon Sep 17 00:00:00 2001 From: Zoltan Kochan Date: Mon, 16 Mar 2026 02:06:14 +0100 Subject: [PATCH] fix: use --no-lockfile for target install --lockfile-dir pointing to GITHUB_WORKSPACE causes the bootstrap pnpm to use the project's pnpm-lock.yaml (which tracks project deps, not pnpm itself), corrupting the install. Revert to --no-lockfile for now. Lockfile-based integrity verification can be added when pnpm v11 has proper support for verifying the pnpm package itself. Co-Authored-By: Claude Opus 4.6 --- dist/index.js | Bin 1425261 -> 1425220 bytes src/install-pnpm/run.ts | 7 +------ 2 files changed, 1 insertion(+), 6 deletions(-) diff --git a/dist/index.js b/dist/index.js index 70480b3347a506a7c3ffb80957e197a5fd952245..4908eea76ef7a34e9c4bdafdd1b9400be318c142 100644 GIT binary patch delta 76 zcmaF+FYL&_u!a`K7N!>F7M2#)7Pc1l7LFFq7OocV7M>Q~7QPn#7J(MQ7NHj57LhHY g6W0srDCz3vTEx=UUVTp040hVv;Y7A delta 117 zcmX@|FYN8Vu!a`K7N!>F7M2#)7Pc1l7LFFq7OocV7M>Q~7QPn#7J(MQ7NHj57LhHY z6W3eES{K`w>J^k0XJ{zt>gMDpXQyT6r0S+*7AffzYg!?s^77%bN}AR=sU-^A7q1sx G$PWO3lqh`w diff --git a/src/install-pnpm/run.ts b/src/install-pnpm/run.ts index e626626..5d97954 100644 --- a/src/install-pnpm/run.ts +++ b/src/install-pnpm/run.ts @@ -47,12 +47,7 @@ export async function runSelfInstaller(inputs: Inputs): Promise { // prepare target pnpm const target = await readTarget({ version, packageJsonFile, standalone }) - const installArgs = ['install', target] - if (GITHUB_WORKSPACE) { - installArgs.push('--lockfile-dir', GITHUB_WORKSPACE) - } else { - installArgs.push('--no-lockfile') - } + const installArgs = ['install', target, '--no-lockfile'] const exitCode = await runCommand(bootstrapPnpm, installArgs, { cwd: dest }) if (exitCode === 0) { const pnpmHome = path.join(dest, 'node_modules/.bin')