Julien Gautier c419a73bf5 fix(ci): pass NODE_OPTIONS=--use-system-ca to clear grpc-tools tls install ...

The CI runner (catthehacker/ubuntu:act-22.04) fails `pnpm install
--frozen-lockfile` because grpc-tools' postinstall downloads a
precompiled protoc archive from node-precompiled-binaries.grpc.io
and Node 24's bundled CA set cannot verify the chain there.

Node 24 itself surfaces the fix in the error message: pass
`--use-system-ca` so Node consults the OS CA store in addition to
its bundled set. The runner image carries the standard Ubuntu
`ca-certificates` bundle, which validates the impacted chains.

Applied at workflow scope (env: block) on both ci.yml and
docs-site.yml so every Node child (pnpm itself plus every
postinstall it spawns) inherits the option. Future native deps
that hit the same TLS rejection will benefit automatically.

2026-05-20 10:15:09 +02:00

..

ci.yml

fix(ci): pass NODE_OPTIONS=--use-system-ca to clear grpc-tools tls install

2026-05-20 10:15:09 +02:00

docs-site.yml

fix(ci): pass NODE_OPTIONS=--use-system-ca to clear grpc-tools tls install

2026-05-20 10:15:09 +02:00

renovate.yml

fix(ci): give Renovate a git identity and a github.com token (#13)

2026-05-05 13:47:30 +02:00

security-scheduled.yml

feat(infra): reactivate act_runner cache by sharing the runners network (#82)

2026-05-10 19:03:58 +02:00