ci: run cache regression tests on Node.js 24

.github/workflows/pr-check.yaml

@@ -13,10 +13,10 @@ jobs:
   check-dist:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
+        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
         with:
           run_install: true
           version: 11

.github/workflows/test.yaml

@@ -7,9 +7,6 @@ on:
       - master
   workflow_dispatch:
 
-permissions:
-  contents: read
-
 jobs:
   smoke:
     # Cross-OS coverage. Exercises the bootstrap install + PATH on each platform,
@@ -54,7 +51,7 @@ jobs:
             version: '12.3.4'
 
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - id: pnpm
         name: Run the action
@@ -137,7 +134,7 @@ jobs:
             expect_pm_on_fail_unset: true
 
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Set up package.json
         run: echo '${{ matrix.manifest }}' > package.json
@@ -186,7 +183,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
 
@@ -237,7 +234,7 @@ jobs:
     env:
       REQUIRED: ${{ matrix.version }}
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
 
@@ -301,7 +298,7 @@ jobs:
     name: 'Standalone Windows self-update (PATH regression)'
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Set up package.json with a minimal manifest
         # run_install needs a manifest to install against. Removing the
@@ -359,7 +356,7 @@ jobs:
             manifest: '{"devEngines":{"packageManager":{"name":"pnpm","version":">=10 <11"}},"dependencies":{"is-odd":"3.0.1"}}'
 
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Set up package.json
         run: echo '${{ matrix.manifest }}' > package.json
@@ -403,7 +400,7 @@ jobs:
                 - yarn
 
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Run the action
         uses: ./
@@ -422,45 +419,3 @@ jobs:
             exit 1
           fi
         shell: bash
-
-  windows_dest_spaces:
-    name: 'Windows destination with spaces (${{ matrix.version }} / standalone=${{ matrix.standalone }})'
-    runs-on: windows-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - version: '10.33.0'
-            standalone: false
-          - version: '11.25.0'
-            standalone: true
-          - version: '12.3.4'
-            standalone: false
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - id: pnpm
-        uses: ./
-        with:
-          version: ${{ matrix.version }}
-          standalone: ${{ matrix.standalone }}
-          dest: '${{ runner.temp }}/pnpm setup & tools'
-      - name: Verify PowerShell and bin_dest use the requested version
-        shell: pwsh
-        env:
-          EXPECTED_VERSION: ${{ matrix.version }}
-          BIN_DEST: ${{ steps.pnpm.outputs.bin_dest }}
-        run: |
-          $actual = pnpm --version
-          if ($LASTEXITCODE -ne 0 -or $actual -ne $env:EXPECTED_VERSION) {
-            throw "Expected $env:EXPECTED_VERSION on PATH, got $actual"
-          }
-          $command = Get-Command pnpm
-          $executable = Join-Path $env:BIN_DEST $command.Name
-          $actual = & $executable --version
-          if ($LASTEXITCODE -ne 0 -or $actual -ne $env:EXPECTED_VERSION) {
-            throw "Expected $env:EXPECTED_VERSION via bin_dest, got $actual"
-          }
-          $pnpx = Get-Command pnpx -ErrorAction Stop
-          if ((Split-Path -Parent $pnpx.Source) -ne $env:BIN_DEST) {
-            throw "pnpx resolves to $($pnpx.Source), expected under $env:BIN_DEST"
-          }

README.md

@@ -64,7 +64,7 @@ Input and output changes:
 
 Version of pnpm to install.
 
-**Optional** when `package.json` declares pnpm in `packageManager`, or sets `devEngines.packageManager.name` to `"pnpm"` and provides `devEngines.packageManager.version`.
+**Optional** when there is a [`packageManager` or `devEngines.packageManager` field in the `package.json`](https://nodejs.org/api/corepack.html).
 
 otherwise, this field is **required** It supports npm versioning scheme, it could be an exact version (such as `10.9.8`), or a version range (such as `10`, `10.x.x`, `10.9.x`, `^10.9.8`, `*`, etc.), or `latest`.
 
@@ -157,8 +157,6 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
-
       - uses: pnpm/action-setup@v6
 ```
 

src/install-pnpm/run.ts

@@ -1,5 +1,4 @@
 import { addPath, exportVariable } from '@actions/core'
-import { exec } from '@actions/exec'
 import { spawn } from 'child_process'
 import { rm, writeFile, mkdir, symlink } from 'fs/promises'
 import { readFileSync, existsSync } from 'fs'
@@ -222,10 +221,15 @@ function getSystemNodeVersion(): Promise<{ major: number; minor: number }> {
 }
 
 function runCommand(cmd: string, args: string[], opts: { cwd: string; env?: Record<string, string | undefined> }): Promise<number> {
-  return exec(`"${cmd}"`, args, {
+  return new Promise<number>((resolve, reject) => {
-    cwd: opts.cwd,
+    const cp = spawn(cmd, args, {
-    env: opts.env && Object.fromEntries(Object.entries(opts.env).filter((entry): entry is [string, string] => entry[1] !== undefined)),
+      cwd: opts.cwd,
-    ignoreReturnCode: true,
+      env: opts.env,
+      stdio: ['pipe', 'inherit', 'inherit'],
+      shell: process.platform === 'win32',
+    })
+    cp.on('error', reject)
+    cp.on('close', resolve)
   })
 }