ci: cache resolved Node.js version in CI (#7536)

watson · web-flow · commit b687bf9ee709 · 2026-02-14T01:54:00.000+01:00
Use actions/cache to store the exact Node.js version
resolved by setup-node, avoiding redundant HTTP
manifest lookups across many parallel jobs per run.

The cache key rotates every 20 minutes so new patches
are picked up regularly. On cache hit, the exact
version is passed to setup-node with check-latest
disabled. On miss, check-latest resolves the latest
patch and persists it for subsequent runs.
diff --git a/.github/actions/node/action.yml b/.github/actions/node/action.yml
@@ -8,17 +8,54 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
-      with:
-        node-version: ${{
+    # Resolve the version from the input alias so we can use it in cache keys.
+    - name: Resolve Node.js version
+      id: node-version
+      env:
+        NODE_VERSION: ${{
           inputs.version == 'eol' && '16' ||
           inputs.version == 'oldest' && '18' ||
           inputs.version == 'maintenance' && '20' ||
           inputs.version == 'active' && '22' ||
           inputs.version == 'latest' && (env.LATEST_VERSION || '24') ||
           inputs.version }}
-        check-latest: true
+      shell: bash
+      run: echo "version=$NODE_VERSION" >> "$GITHUB_OUTPUT"
+
+    # Cache a tiny file containing the exact Node.js version resolved by a previous run.
+    # Key rotates every 20 minutes (epoch / 1200) so patches are picked up regularly.
+    # On cache hit, we pass the exact version to setup-node and skip the HTTP manifest lookup.
+    - name: Compute cache key
+      id: cache-key
+      shell: bash
+      run: echo "block=$(( $(date -u +%s) / 1200 ))" >> "$GITHUB_OUTPUT"
+    - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+      id: node-version-cache
+      with:
+        path: /tmp/.node-resolved-version
+        key: node-resolved-${{ runner.os }}-${{ runner.arch }}-v${{ steps.node-version.outputs.version }}-${{ steps.cache-key.outputs.block }}
+        restore-keys: node-resolved-${{ runner.os }}-${{ runner.arch }}-v${{ steps.node-version.outputs.version }}-
+    - name: Read cached version
+      id: cached
+      shell: bash
+      run: |
+        if [ -f /tmp/.node-resolved-version ]; then
+          echo "version=$(cat /tmp/.node-resolved-version)" >> "$GITHUB_OUTPUT"
+        fi
+
+    - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+      with:
+        # Use the exact cached version when available, otherwise fall back to the requested version.
+        node-version: ${{ steps.cached.outputs.version || steps.node-version.outputs.version }}
+        # Resolve the latest patch on master when no cached version exists.
+        check-latest: ${{ steps.cached.outputs.version == '' }}
         registry-url: ${{ inputs.registry-url || 'https://registry.npmjs.org' }}
+
+    # Persist the resolved version so subsequent runs within this 20-minute window can reuse it.
+    - name: Save resolved version
+      if: steps.node-version-cache.outputs.cache-hit != 'true'
+      shell: bash
+      run: node -v | tr -d 'v' > /tmp/.node-resolved-version
     # Avoid GitHub REST API tag lookups (api.github.com/.../git/refs/tags) which can hit installation rate limits
     # in large orgs / high-parallelism workflows. Instead, use a direct release asset URL.
     #
