skills/pnpm-action-setup-cache/SKILL.md
Update GitHub Actions workflows to use pnpm/action-setup cache support introduced in v4.3.0. Use when creating or editing workflow YAML files that install pnpm, especially when they use actions/setup-node cache: pnpm or actions/cache entries for pnpm store paths.
npx skillsauth add stefafafan/skills pnpm-action-setup-cacheInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
.github/workflows/*.yml or .yaml files.pnpm/action-setup.uses: pnpm/action-setup@... version.actions/setup-node using cache: pnpm, oractions/cache targeting pnpm store directories.pnpm/action-setup is older than v4.3.0, update it to a modern tag (v4.3.0 or newer).- uses: pnpm/[email protected]
with:
cache: true
version (pnpm CLI version) or other unrelated inputs unless the user explicitly asks to change them.actions/setup-node steps:
cache: pnpmcache-dependency-path values that were only used for pnpm cachingactions/cache steps that cache pnpm store directories (for example paths from pnpm store path or ~/.pnpm-store).pnpm/action-setup with cache: true.actions/setup-node or actions/cache steps.Before:
- uses: pnpm/[email protected]
- uses: actions/setup-node@v4
with:
node-version-file: .nvmrc
cache: pnpm
After:
- uses: pnpm/[email protected]
with:
cache: true
- uses: actions/setup-node@v4
with:
node-version-file: .nvmrc
testing
Add a one-week cooldown to Dependabot or Renovate dependency update configuration. Use when a repository needs Dependabot `cooldown.default-days: 7`, Renovate `minimumReleaseAge: "7 days"`, or migration from Renovate `stabilityDays` to `minimumReleaseAge`.
data-ai
Create or update GitHub Actions workflow files with remote `uses:` entries pinned to full commit SHAs annotated with the resolved release tag. Use whenever creating or updating a workflow file which contains `uses:` entries.
tools
Pick the correct Go version for `go` and `toolchain` directives. Use when an agent needs to bump the Go version, update a go or toolchain directive, or align Go versions in go.mod, go.work, CI, containers, version manager files, or docs.
documentation
Draft conventional commit messages that explain why a change exists instead of listing what changed. Use when trying to write a git commit message.