npm pinning (again) (#2462)

Author: trask

.github/scripts/assign-issue-owners.js

@@ -0,0 +1,62 @@
+const fs = require('fs');
+const { parse } = require('yaml');
+const { Octokit } = require('@octokit/rest');
+
+async function main() {
+  // Get inputs from environment
+  const token = process.env.GITHUB_TOKEN;
+  const labelName = process.env.LABEL_NAME;
+  const issueNumber = parseInt(process.env.ISSUE_NUMBER);
+  const owner = process.env.REPO_OWNER;
+  const repo = process.env.REPO_NAME;
+
+  if (!labelName.startsWith('component:')) {
+    console.error('Label does not match expected pattern');
+    process.exit(1);
+  }
+
+  const componentName = labelName.replace('component:', '');
+  console.log(`Processing component: ${componentName}`);
+
+  // Read and parse component_owners.yml
+  const yamlContent = fs.readFileSync('.github/component_owners.yml', 'utf8');
+  const data = parse(yamlContent);
+
+  if (!data || !data.components) {
+    console.error('Invalid component_owners.yml structure');
+    process.exit(1);
+  }
+
+  const components = data.components;
+
+  if (!(componentName in components)) {
+    console.error(`Component '${componentName}' not found in component_owners.yml`);
+    process.exit(1);
+  }
+
+  const owners = components[componentName];
+
+  if (!owners || owners.length === 0) {
+    console.error(`No owners found for component '${componentName}'`);
+    process.exit(1);
+  }
+
+  console.log(`Found owners: ${owners.join(', ')}`);
+
+  // Assign the issue to the owners
+  const octokit = new Octokit({ auth: token });
+
+  await octokit.rest.issues.addAssignees({
+    owner,
+    repo,
+    issue_number: issueNumber,
+    assignees: owners
+  });
+
+  console.log(`Successfully assigned issue #${issueNumber} to ${owners.join(', ')}`);
+}
+
+main().catch(error => {
+  console.error(error);
+  process.exit(1);
+});

.github/scripts/package-lock.json

@@ -0,0 +1,10 @@
+{
+  "name": "workflows",
+  "version": "1.0.0",
+  "description": "Dependencies for GitHub Action workflows",
+  "private": true,
+  "dependencies": {
+    "@octokit/rest": "^21.0.2",
+    "yaml": "2.8.1"
+  }
+}

.github/scripts/package.json

@@ -21,61 +21,19 @@ jobs:
 
       - name: Setup Node.js
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
-
-      - name: Install yaml dependency used below
-        run: npm install [email protected] --integrity=sha512-lcYcMxX2PO9XMGvAJkJ3OsNMw+/7FKes7/hgerGUYWIoWu5j/+YQqcZr5JnPZWzOsEBgMbSbiSTn/dv/69Mkpw==
-
-      - name: Parse component label and assign owners
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
-          script: |
-            const fs = require('fs');
-            const { parse } = require('yaml');
-
-            // Extract component name from label
-            const labelName = context.payload.label.name;
-
-            if (!labelName.startsWith('component:')) {
-              core.setFailed('Label does not match expected pattern');
-              return;
-            }
-
-            const componentName = labelName.replace('component:', '');
-            console.log(`Processing component: ${componentName}`);
-
-            // Read and parse component_owners.yml
-            const yamlContent = fs.readFileSync('.github/component_owners.yml', 'utf8');
-            const data = parse(yamlContent);
-
-            if (!data || !data.components) {
-              core.setFailed('Invalid component_owners.yml structure');
-              return;
-            }
-
-            const components = data.components;
-
-            if (!(componentName in components)) {
-              core.setFailed(`Component '${componentName}' not found in component_owners.yml`);
-              return;
-            }
-
-            const owners = components[componentName];
-
-            if (!owners || owners.length === 0) {
-              core.setFailed(`No owners found for component '${componentName}'`);
-              return;
-            }
-
-            console.log(`Found owners: ${owners.join(', ')}`);
-
-            // Assign the issue to the owners
-            const issueNumber = context.payload.issue.number;
-
-            await github.rest.issues.addAssignees({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              issue_number: issueNumber,
-              assignees: owners
-            });
-
-            console.log(`Successfully assigned issue #${issueNumber} to ${owners.join(', ')}`);
+          cache: npm
+          cache-dependency-path: .github/scripts/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+        working-directory: .github/scripts
+
+      - name: Assign issue to component owners
+        run: node .github/scripts/assign-issue-owners.js
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          LABEL_NAME: ${{ github.event.label.name }}
+          ISSUE_NUMBER: ${{ github.event.issue.number }}
+          REPO_OWNER: ${{ github.repository_owner }}
+          REPO_NAME: ${{ github.event.repository.name }}

.github/workflows/assign-issue-owners.yml

@@ -56,3 +56,6 @@ bin
 
 # Gradle build scans
 build-scan.txt
+
+# Node
+node_modules