6a6d629bcf
CI / secrets-scan (push) Successful in 6s
CI / sast (push) Successful in 15s
CI / vuln-scan (push) Successful in 18s
CI / test (push) Successful in 27s
CI / lint (push) Failing after 30s
CI / build-images (push) Has been skipped
CI / image-scan (push) Has been skipped
CI / push (push) Has been skipped
pnpm/action-setup@v4 was ignoring its `version` input on this runner and installing pnpm 10.x no matter what value we passed. That's why every attempt to land an onlyBuiltDependencies allowlist failed — ERR_PNPM_IGNORED_BUILDS kept blocking the install. Switch to corepack, which Node 22 ships with, and `corepack prepare pnpm@9.14.4 --activate`. Same mechanism the Dockerfiles use. Adds an explicit `pnpm --version` line so future CI runs make the actual installed version visible. Dropped `cache: pnpm` from actions/setup-node@v4 since pnpm isn't on PATH yet at that step — the pnpm store cache wasn't doing much for us on first runs anyway. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>