Arbeidstilsynet/action-pnpm-setup

Opinionated action for fully setting up dependencies for a PNPM-based project. Installs chosen Node version, PNPM, audits dependencies and finally installs dependencies.

Configure packageManager in package.json to ensure the same version of PNPM is used in pipelines and locally. Use Corepack locally to always get the correct version of PNPM for your repo.

Requirements

PNPM version must be specified in packageManager in your package.json.

Inputs

Name	Description	Required	Default
node-version	Node.js version to use	No	24.x
working-directory	Working directory containing package.json and pnpm-lock.yaml	No	.
skip-install	Skip pnpm install step	No	false
skip-audit	Skip pnpm audit step	No	false

Outputs

None

Usage

Minimal

on:
  pull_request:

jobs:
  ci:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: Arbeidstilsynet/action-pnpm-setup@v1

With all optional inputs

on:
  pull_request:

jobs:
  ci:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: Arbeidstilsynet/action-pnpm-setup@v1
        with:
          node-version: "24.x"
          working-directory: "some/path"
          skip-install: false
          skip-audit: false

Versioning

This repository uses a simple versioning system based on the VERSION file. When you update the VERSION file and push to main, a Git tag with that version is created or updated automatically by the workflow. If you make breaking changes to the action, bump the version and update CHANGELOG.md.