ci: 对齐 Actions 的 Node 和 pnpm 版本

[Vanisper]

Summary by CodeRabbit

发布说明

• Chores
  • 更新 GitHub 工作流配置以增强依赖管理的一致性
  • 优化 Node.js 版本管理，自动从配置文件读取版本设置
  • 强化依赖安装验证，确保锁定文件的完整性和准确性，防止潜在的依赖不匹配问题

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 90536899-49bc-4511-bcbc-e254a9de17b0

📥 Commits

Reviewing files that changed from the base of the PR and between b50523a and 930d560.

📒 Files selected for processing (2)

• .github/workflows/deploy.yml
• .github/workflows/pkg.pr.new.yml

---

工作流概览

两个 GitHub Actions 工作流配置更新，启用从 .nvmrc 文件读取 Node 版本，并强制使用 pnpm install --frozen-lockfile 以确保依赖管理的一致性。

变更详情

CI/CD 工作流配置

层级 / 文件(s)	摘要
Node.js 版本配置 .github/workflows/deploy.yml	actions/setup-node 现在通过 node-version-file 从 .nvmrc 读取 Node 版本，替代硬编码的 node-version: 20。
pnpm 包管理器设置 .github/workflows/deploy.yml	pnpm 操作配置了 run_install: false，由单独的安装步骤显式处理依赖安装。
冻结锁定文件强制 .github/workflows/deploy.yml, .github/workflows/pkg.pr.new.yml	两个工作流的依赖安装步骤更新为 pnpm install --frozen-lockfile，在锁定文件不一致时强制 CI 失败。
工作流集成 .github/workflows/pkg.pr.new.yml	PR 构建工作流的检出和安装上下文已调整，以适配更新的安装命令。

评审工作量评估

🎯 2 (简单) | ⏱️ ~8 分钟

诗

兔子欢呼雀跃跳，
.nvmrc 版本正确好，
锁定文件冻冰冰，
依赖一致无烦恼！
CI/CD 更稳当，
构建流程顺利畅。🐰✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	PR标题使用中文准确地总结了主要变更：对齐GitHub Actions工作流中的Node和pnpm版本配置
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/github-actions

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

• Generate code and open pull requests
• Plan features and break down work
• Investigate incidents and troubleshoot customer tickets together
• Automate recurring tasks and respond to alerts with triggers
• Summarize progress and report instantly

Built for teams:

• Shared memory across your entire org—no repeating context
• Per-thread sandboxes to safely plan and execute work
• Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[pkg-pr-new]

Open in StackBlitz

commit: 930d560