From 1e2e090b04a77cf7a652868e301802e15030692e Mon Sep 17 00:00:00 2001
From: Lachlan Collins <1667261+lachlancollins@users.noreply.github.com>
Date: Wed, 13 May 2026 23:04:52 +1000
Subject: [PATCH 1/2] ci: harden setup action, disable renovate automerge

---
 .github/renovate.json    |  1 -
 .github/setup/action.yml | 11 +++--------
 pnpm-workspace.yaml      |  8 ++++----
 3 files changed, 7 insertions(+), 13 deletions(-)

diff --git a/.github/renovate.json b/.github/renovate.json
index 245d139..aa6b59b 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -7,7 +7,6 @@
     "group:allNonMajor",
     "schedule:weekly",
     ":approveMajorUpdates",
-    ":automergeMinor",
     ":disablePeerDependencies",
     ":maintainLockFilesMonthly",
     ":semanticCommits",
diff --git a/.github/setup/action.yml b/.github/setup/action.yml
index dee62f0..6b4260c 100644
--- a/.github/setup/action.yml
+++ b/.github/setup/action.yml
@@ -1,22 +1,17 @@
 name: Setup Tools
-description: Action that sets up Node, pnpm, and caching
+description: Action that sets up Node and pnpm
 runs:
   using: composite
   steps:
     - name: Setup pnpm
       uses: pnpm/action-setup@739bfe42ca9233c5e6aca07c1a25a9d34aca49b0 # v6.0.7
+      with:
+        cache: false
     - name: Setup Node
       uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       with:
         node-version-file: .nvmrc
         package-manager-cache: false
-    # - name: Setup pnpm cache
-    #   uses: actions/cache@v5.0.4
-    #   with:
-    #     path: ${{ env.STORE_PATH }}
-    #     key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}-v2
-    #     restore-keys: |
-    #       ${{ runner.os }}-pnpm-store-
     - name: Install dependencies
       shell: bash
       run: pnpm install --frozen-lockfile
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 9a3df56..b4640cd 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -6,10 +6,6 @@ packages:
   - integrations/*
   - packages/*
 
-allowBuilds:
-  nx: true
-  unrs-resolver: true
-
 catalog:
   '@arethetypeswrong/core': ^0.18.2
   '@changesets/cli': ^2.31.0
@@ -58,3 +54,7 @@ catalog:
   vitest: ^4.1.6
   vue: ^3.5.34
   vue-eslint-parser: ^10.4.0
+
+allowBuilds:
+  nx: true
+  unrs-resolver: false

From 3d006f13b6838b8fe489c24ce9b9dfe945af5271 Mon Sep 17 00:00:00 2001
From: Lachlan Collins <1667261+lachlancollins@users.noreply.github.com>
Date: Wed, 13 May 2026 23:15:21 +1000
Subject: [PATCH 2/2] Try removing explicit passing GH_TOKEN

---
 .github/workflows/pr.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index c96843f..e3325c1 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -72,5 +72,3 @@ jobs:
         uses: ./.github/setup
       - name: Changeset Preview
         uses: ./.github/changeset-preview
-        with:
-          GH_TOKEN: ${{ secrets.GH_TOKEN }}