Josh Gross

@Quintisimo this is a bit outside the scope of the `actions/github-script` action, but I'll try my best to help out. Can you double check that `PRIVATE_REGISTRY_TOKEN` is set to the...

> Why not just publish the package to npm? This action is not intended to be used as a package, so I do not want to publish it to `npm`.

@alambike or @patricioperezv could you clarify your use case? Are there examples we can add to the README for this? I'm fine with adding this if we have some solid...

Thanks for your contribution @peterbourgon! I'll need to do a bit of research and I'll get back to you on this change.

While I understand that `go.sum` is not a lockfile, it does contain module checksums that could prevent tampering. From that perspective, it provides a more complete picture of the dependencies...

👋 Hey everyone, Just a quick update - your concerns have been heard and I'm working on getting a proper response. This action is still being supported by GitHub, but...

That makes sense @IanButterworth, thanks for sharing your perspective. I'd recommend testing changes locally or within workflows on a fork to validate them - that's going to be a much...

I was made of aware of #1325 on Thursday and reviewed it then asking for another test case. I'm still following up internally to see if there's a better option...

I've disabled our stale workflow for now - https://github.com/actions/cache/actions/workflows/close-inactive-issues.yml

> Like updating to node20 which has lingered since February [#1326](https://github.com/actions/cache/pull/1326) This action has supported Node 20 since January https://github.com/actions/cache/releases/tag/v4.0.0 #1326 is a development-only change.