From f59b7df97fda2776d438d6ecb2690512fd568d57 Mon Sep 17 00:00:00 2001 From: Stephen Adamson Date: Thu, 9 Jul 2026 17:07:17 +0100 Subject: [PATCH] ci: revert go-version to 1.25, add npm ci fallback in frontend QC jobs MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 1.25.12 unavailable in runner toolcache — revert to '1.25' which resolves to latest patch. The GO-2026-5856 vuln requires a Go patch release not yet available. Frontend QC jobs now run npm ci before their command since cache restore alone doesn't guarantee node_modules. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus --- .gitea/workflows/ci.yaml | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml index c4f05e3..563c6a5 100644 --- a/.gitea/workflows/ci.yaml +++ b/.gitea/workflows/ci.yaml @@ -24,7 +24,7 @@ jobs: - uses: actions/setup-go@v5 with: - go-version: "1.25.12" + go-version: "1.25" cache: false - name: Cache Go modules @@ -87,7 +87,7 @@ jobs: - uses: actions/setup-go@v5 with: - go-version: "1.25.12" + go-version: "1.25" cache: false - name: Cache Go modules @@ -154,7 +154,7 @@ jobs: - uses: actions/setup-go@v5 with: - go-version: "1.25.12" + go-version: "1.25" cache: false - name: Cache Go modules @@ -201,7 +201,7 @@ jobs: - uses: actions/setup-go@v5 with: - go-version: "1.25.12" + go-version: "1.25" cache: false - name: Cache Go modules @@ -289,5 +289,8 @@ jobs: restore-keys: | ${{ runner.os }}-npm- + - name: Ensure dependencies + run: cd frontend && npm ci + - name: ${{ matrix.script }} run: cd frontend && ${{ matrix.cmd }}