feat: enable npm caching for datadog-ci dependency#37
Merged
Conversation
8154135 to
f1db536
Compare
Replace dynamic `latest` version resolution with a pinned version in package.json to leverage GitHub Actions' built-in npm caching. Changes: - Add package.json with @datadog/[email protected] - Add package-lock.json for reproducible installs - Update action to use `npm ci` with caching when no custom version specified - Add npm ecosystem to dependabot for automatic version updates Users can still override with a specific version via `datadog-ci-version` input, but leaving it empty (default) now uses the cached bundled version.
f1db536 to
6f5c00f
Compare
juan-fernandez
added a commit
that referenced
this pull request
Jan 21, 2026
This reverts commit a0226c9.
juan-fernandez
added a commit
that referenced
this pull request
Jan 21, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

Replace dynamic
latestversion resolution with a pinned version inpackage.jsonto leverage GitHub Actions' built-in npm caching.Changes:
package.jsonwith@datadog/[email protected](latest version when creating this PR)package-lock.jsonfor reproducible installsnpm ciwith caching when no custom version specifiedUsers can still override with a specific version via
datadog-ci-versioninput, but leaving it empty (default) now uses the cached bundled version.The largest change that a user of this action will see after upgrading to a version with this change, is that they will no longer automatically get new versions of
datadog-ciwithout also having to upgrade the action version. You can argue that this is actually a feature, as it's pinning the version ofdatadog-ci, which from a security point of view is actually a good thing.Note to reviewers
I force version 2 of the npm lock file to retain support for Node.js 14 which ships with npm v6.