From a508dac8f7e0818e3c563c1aec1b4599087bfeec Mon Sep 17 00:00:00 2001 From: Abhishek Doshi Date: Wed, 16 Sep 2026 17:18:23 +0530 Subject: [PATCH] ci: skip Vale binary download in the build job @vvago/vale 3.21.0 downloads its binary from the unauthenticated GitHub REST API (api.github.com/.../releases/assets/), which is limited to 60 requests per hour per IP. Shared macOS runner IPs exhaust that, so the postinstall fails with a 403. 3.17.1 used the releases/download URL, which is not subject to that limit. The build job never runs Vale: Vale's postinstall is the only script allow-scripts enables, and linting happens in the style-check job via vale-action. Drop the allow-scripts step so the build job no longer depends on that download. --- .github/actions/astro_site/action.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/actions/astro_site/action.yaml b/.github/actions/astro_site/action.yaml index 61cc76fb..c4b01936 100644 --- a/.github/actions/astro_site/action.yaml +++ b/.github/actions/astro_site/action.yaml @@ -20,7 +20,7 @@ runs: node-version: ${{ inputs.node_version }} - name: ⬇️ Install Dependencies - run: npm ci && npx --no allow-scripts + run: npm ci shell: bash working-directory: ${{ inputs.working_directory }}