fix: resolve workflow conflicts and enforce MARL type primitives

.github/actions/abp-build/action.yml

@@ -2,6 +2,9 @@ name: abp-build
 inputs:
   path: { required: true }
   image: { required: false }
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: "composite"
   steps:

.github/actions/backlog-guard/action.yml

@@ -4,6 +4,9 @@ inputs:
   github-token:
     description: "GitHub token for API access"
     required: true
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: "composite"
   steps:

.github/actions/docker-build-push/action.yml

@@ -3,6 +3,9 @@ inputs:
   image: { required: true }
   context: { required: true }
   tags: { required: true }
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: "composite"
   steps:

.github/actions/fabric-warm/action.yml

@@ -1,6 +1,9 @@
 name: fabric-warm
 inputs:
   label: { required: true }
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: "composite"
   steps:

.github/actions/helm-deploy/action.yml

@@ -6,6 +6,9 @@ inputs:
   image:
     { required: true, description: "Container image (tag or digest) to verify before deployment" }
   cosign_public_key: { required: false, description: "Optional cosign public key for verification" }
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: "composite"
   steps:

.github/actions/maestro-gate-check/action.yml

@@ -13,6 +13,9 @@ inputs:
   token:
     description: Optional bearer token for gateway
     required: false
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: composite
   steps:

.github/actions/maestro-run/action.yml

@@ -52,6 +52,9 @@ outputs:
   steps_total:
     description: "Total number of steps"
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: "composite"
   steps:

.github/actions/release-bundle/action.yml

@@ -37,6 +37,9 @@ outputs:
     description: "Path to the compressed evidence tarball"
     value: ${{ steps.bundle.outputs.bundle_path }}
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: "composite"
   steps:

.github/actions/release-captain/action.yml

@@ -42,6 +42,9 @@ outputs:
     description: 'Overall quality score (0-100)'
     value: ${{ steps.analyze.outputs.quality_score }}
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: 'composite'
   steps:

.github/actions/setup-pnpm/action.yml

@@ -1,59 +1,17 @@
-name: "Setup pnpm with cache"
-description: "Setup Node.js with pnpm and configure caching"
+name: "Setup pnpm"
+description: "Installs pnpm with optional caching"
 
 inputs:
-  node-version:
-    description: "Node.js version to use"
+  version:
+    description: "pnpm version to install"
     required: false
-    default: "20.x"
-  enable-turbo-cache:
-    description: "Enable Turbo remote cache"
-    required: false
-    default: "true"
+    default: "9.5.0"
 
 runs:
   using: "composite"
   steps:
-    - name: Setup pnpm
-      uses: pnpm/action-setup@v4
-      with:
-        version: 9.15.4
-        run_install: false
-
-    - name: Setup Node.js
-      uses: actions/setup-node@v4
-      with:
-        node-version: ${{ inputs.node-version }}
-        cache: 'pnpm'
-
-    - name: Enable corepack
-      shell: bash
-      run: corepack enable
-    - name: Get pnpm store directory
+    - name: Enable Corepack and Install pnpm
       shell: bash
-      id: pnpm-store
       run: |
-        echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_OUTPUT
-
-    - name: Cache pnpm store
-      uses: actions/cache@v4
-      with:
-        path: ${{ steps.pnpm-store.outputs.STORE_PATH }}
-        key: ${{ runner.os }}-pnpm-store-${{ hashFiles('pnpm-lock.yaml') }}
-        restore-keys: |
-          ${{ runner.os }}-pnpm-store-
-        retention-days: 7
-
-    - name: Cache Turbo
-      if: inputs.enable-turbo-cache == 'true'
-      uses: actions/cache@v4
-      with:
-        path: .turbo
-        key: ${{ runner.os }}-turbo-${{ hashFiles('**/pnpm-lock.yaml', '**/package-lock.json', '**/yarn.lock', '**/turbo.json', '**/package.json') }}
-        restore-keys: |
-          ${{ runner.os }}-turbo-
-        retention-days: 7
-
-    - name: Install dependencies
-      shell: bash
-      run: pnpm install --frozen-lockfile
+        corepack enable
+        corepack install --global pnpm@${{ inputs.version }}

.github/actions/setup-toolchain/action.yml

@@ -17,6 +17,9 @@ inputs:
     required: false
     default: "."
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: "composite"
   steps:
@@ -27,9 +30,10 @@ runs:
         registry-url: "https://registry.npmjs.org"
 
     - name: Setup pnpm
-      uses: pnpm/action-setup@v4
-        with:
-          version: 9.15.4
+      name: Setup pnpm
+      run: |
+        corepack enable
+        corepack install --global pnpm@9.5.0
 
     - name: Get pnpm store directory
       shell: bash

.github/actions/setup-turbo/action.yml

@@ -1,10 +1,14 @@
 name: setup-turbo
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: "composite"
   steps:
-    - uses: pnpm/action-setup@v4
-      with:
-        version: 9.15.4
+    - name: Setup pnpm
+      run: |
+        corepack enable
+        corepack install --global pnpm@9.5.0
     - run: corepack enable
       shell: bash
     - run: pnpm i --frozen-lockfile

.github/actions/setup/action.yml

@@ -14,6 +14,9 @@ inputs:
     required: false
     default: 'true'
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: 'composite'
   steps:
@@ -27,7 +30,13 @@ runs:
       shell: bash
       run: corepack enable
 
-    - uses: pnpm/action-setup@v4
+    - name: Setup pnpm
+
+      run: |
+
+        corepack enable
+
+        corepack install --global pnpm@9.5.0
       with:
         version: 9.15.4
 

.github/actions/sigstore-verify/action.yml

@@ -14,6 +14,9 @@ inputs:
     required: false
   evidence_id:
     required: true
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: "composite"
   steps:

.github/actions/verify-workflow-versions/action.yml

@@ -1,5 +1,8 @@
 name: verify-workflow-versions
 description: Ensure only allowed action major versions are used
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 runs:
   using: "node20"
   main: "index.cjs"

.github/workflows/.archive/_auth-oidc.yml

@@ -21,6 +21,9 @@ permissions:
   id-token: write
   contents: read
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 jobs:
   auth:
     name: AWS OIDC Auth

.github/workflows/.archive/_deploy.yml

@@ -21,6 +21,9 @@ on:
         description: "Status of the SLO gate"
         value: ${{ jobs.slo-gate.outputs.status }}
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 jobs:
   slo-gate:
     name: Pre-Deploy SLO Gate (${{ inputs.environment }})

.github/workflows/.archive/_reusable-aws.yml

@@ -45,6 +45,7 @@ on:
         required: false
 
 env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
   AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
   AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
   AWS_DEFAULT_REGION: ${{ secrets.AWS_REGION || inputs.aws_region }}

.github/workflows/.archive/_reusable-build.yml

@@ -48,6 +48,9 @@ on:
 permissions:
   contents: read
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 jobs:
   build:
     name: Build Application
@@ -68,15 +71,15 @@ jobs:
         run: corepack enable
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v3
-          with:
-            version: 9.15.4
+        name: Setup pnpm
+        run: |
+          corepack enable
+          corepack install --global pnpm@9.5.0
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
           node-version: ${{ inputs.node-version }}
-          cache: "pnpm"
           cache-dependency-path: '**/pnpm-lock.yaml'
 
       - name: Get pnpm store path

.github/workflows/.archive/_reusable-ci-fast.yml

@@ -11,6 +11,9 @@ on:
         type: string
         default: "pnpm run test:fast -- --runInBand --bail=1 --silent"
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 jobs:
   fast:
     runs-on: ubuntu-22.04
@@ -23,15 +26,14 @@ jobs:
       - uses: actions/checkout@v4 # v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v3
-        with:
-          version: 9.15.4
-          run_install: false
+        name: Setup pnpm
+        run: |
+          corepack enable
+          corepack install --global pnpm@9.5.0
 
       - name: Setup Node
         uses: actions/setup-node@v4 # v6
         with:
-          cache: 'pnpm'
           node-version: "20.11.x"
 
       - name: Enable corepack (belt & suspenders)

.github/workflows/.archive/_reusable-ci-metrics.yml

@@ -40,6 +40,9 @@ permissions:
   contents: read
   actions: read
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 jobs:
   collect-metrics:
     name: Collect CI Metrics

.github/workflows/.archive/_reusable-ci-perf.yml

@@ -6,6 +6,9 @@ on:
 permissions:
   contents: read
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 jobs:
   perf:
     name: GraphQL SLO guardrail
@@ -18,15 +21,15 @@ jobs:
         uses: actions/checkout@v4 # v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v3
-          with:
-            version: 9.15.4
+        name: Setup pnpm
+        run: |
+          corepack enable
+          corepack install --global pnpm@9.5.0
 
       - name: Setup Node.js
         uses: actions/setup-node@v4 # v6
         with:
           node-version: "20"
-          cache: "pnpm"
           cache-dependency-path: '**/pnpm-lock.yaml'
 
       - name: Install dependencies

.github/workflows/.archive/_reusable-ci.yml

@@ -46,6 +46,9 @@ on:
         description: "NPM token for private packages"
         required: false
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 jobs:
   ci:
     runs-on: ubuntu-22.04
@@ -55,9 +58,10 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Setup pnpm
-        uses: pnpm/action-setup@v3
-          with:
-            version: 9.15.4
+        name: Setup pnpm
+        run: |
+          corepack enable
+          corepack install --global pnpm@9.5.0
       - uses: actions/setup-node@v4
         with:
           node-version: ${{ inputs.node-version }}