From 796b1ad814e906e029eca4d48bd11951b4576b96 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 9 Jun 2026 09:33:17 +0000 Subject: [PATCH 1/2] chore(deps): bump MetaMask/action-checkout-and-setup from 2 to 3 Bumps [MetaMask/action-checkout-and-setup](https://github.com/metamask/action-checkout-and-setup) from 2 to 3. - [Release notes](https://github.com/metamask/action-checkout-and-setup/releases) - [Changelog](https://github.com/MetaMask/action-checkout-and-setup/blob/main/CHANGELOG.md) - [Commits](https://github.com/metamask/action-checkout-and-setup/compare/v2...v3) --- updated-dependencies: - dependency-name: MetaMask/action-checkout-and-setup dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .../workflows/ensure-blocking-pr-labels-absent.yml | 2 +- .github/workflows/lint-build-test.yml | 12 ++++++------ .github/workflows/publish-release.yml | 6 +++--- 3 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/ensure-blocking-pr-labels-absent.yml b/.github/workflows/ensure-blocking-pr-labels-absent.yml index d3bceb3e..5e8cc05f 100644 --- a/.github/workflows/ensure-blocking-pr-labels-absent.yml +++ b/.github/workflows/ensure-blocking-pr-labels-absent.yml @@ -16,7 +16,7 @@ jobs: pull-requests: read steps: - name: Checkout and setup environment - uses: MetaMask/action-checkout-and-setup@v2 + uses: MetaMask/action-checkout-and-setup@v3 with: is-high-risk-environment: false - name: Run command diff --git a/.github/workflows/lint-build-test.yml b/.github/workflows/lint-build-test.yml index b2297d89..85ab793b 100644 --- a/.github/workflows/lint-build-test.yml +++ b/.github/workflows/lint-build-test.yml @@ -59,7 +59,7 @@ jobs: child-workspace-package-names: ${{ steps.workspace-package-names.outputs.child-workspace-package-names }} steps: - name: Checkout and setup environment - uses: MetaMask/action-checkout-and-setup@v2 + uses: MetaMask/action-checkout-and-setup@v3 with: is-high-risk-environment: false cache-node-modules: true @@ -85,7 +85,7 @@ jobs: - readme-content:check steps: - name: Checkout and setup environment - uses: MetaMask/action-checkout-and-setup@v2 + uses: MetaMask/action-checkout-and-setup@v3 with: is-high-risk-environment: false node-version: ${{ matrix.node-version }} @@ -111,7 +111,7 @@ jobs: package-name: ${{ fromJson(needs.prepare.outputs.child-workspace-package-names) }} steps: - name: Checkout and setup environment - uses: MetaMask/action-checkout-and-setup@v2 + uses: MetaMask/action-checkout-and-setup@v3 with: is-high-risk-environment: false node-version: ${{ matrix.node-version }} @@ -143,7 +143,7 @@ jobs: node-version: [24.x] steps: - name: Checkout and setup environment - uses: MetaMask/action-checkout-and-setup@v2 + uses: MetaMask/action-checkout-and-setup@v3 with: is-high-risk-environment: false node-version: ${{ matrix.node-version }} @@ -174,7 +174,7 @@ jobs: node-version: [24.x] steps: - name: Checkout and setup environment - uses: MetaMask/action-checkout-and-setup@v2 + uses: MetaMask/action-checkout-and-setup@v3 with: is-high-risk-environment: false node-version: ${{ matrix.node-version }} @@ -197,7 +197,7 @@ jobs: package-name: ${{ fromJson(needs.prepare.outputs.child-workspace-package-names) }} steps: - name: Checkout and setup environment - uses: MetaMask/action-checkout-and-setup@v2 + uses: MetaMask/action-checkout-and-setup@v3 with: is-high-risk-environment: false node-version: ${{ matrix.node-version }} diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml index 8591f13c..68baca6b 100644 --- a/.github/workflows/publish-release.yml +++ b/.github/workflows/publish-release.yml @@ -53,7 +53,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout and setup environment - uses: MetaMask/action-checkout-and-setup@v2 + uses: MetaMask/action-checkout-and-setup@v3 with: is-high-risk-environment: true - uses: MetaMask/action-publish-release@v3 @@ -113,7 +113,7 @@ jobs: needs: publish-release steps: - name: Checkout and setup environment - uses: MetaMask/action-checkout-and-setup@v2 + uses: MetaMask/action-checkout-and-setup@v3 with: is-high-risk-environment: true ref: ${{ github.sha }} @@ -137,7 +137,7 @@ jobs: id-token: write steps: - name: Checkout and setup environment - uses: MetaMask/action-checkout-and-setup@v2 + uses: MetaMask/action-checkout-and-setup@v3 with: is-high-risk-environment: true ref: ${{ github.sha }} From e559fcb5ae2a3f6153a39c881cd384228faec858 Mon Sep 17 00:00:00 2001 From: Ulisses Ferreira Date: Thu, 6 Aug 2026 09:58:19 +0100 Subject: [PATCH 2/2] fix(ci): set force-setup on prepare job for action-checkout-and-setup v3 v3 can skip checkout and setup when the node_modules cache already exists. The prepare job still runs yarn workspaces list in the same job, so force setup is required to keep the workspace available after a cache hit. --- .github/workflows/lint-build-test.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/lint-build-test.yml b/.github/workflows/lint-build-test.yml index 85ab793b..f2aa7317 100644 --- a/.github/workflows/lint-build-test.yml +++ b/.github/workflows/lint-build-test.yml @@ -63,6 +63,7 @@ jobs: with: is-high-risk-environment: false cache-node-modules: true + force-setup: true node-version: ${{ matrix.node-version }} - name: Fetch workspace package names id: workspace-package-names