Sora Morimoto

This sounds good, but Dependabot often prioritises full semver style tags, which I worry could be noise.

I agree with @dra27, `opam exec` is better. We can get rid of this by passing `--enable-shell-hook` to `opam init`, but still the behavior is often unstable.

Of course I can add something to the action that handles this well, but I also think it would be smarter to add a better fix to opam after this...

I just opened a PR to address this. Since v2 removed quite a lot of the differences between each platform, it was done in a fairly simple way.

If the cache restore fails, the workflow may proceed without initializing some components that should be initialized, which is one of the workarounds that currently has not been fully implemented....

In addition to adding an input, one idea is to expose `OPAMLOCKED` by default if you have the `*.opam.locked` file in the project root, but I think this could cause...

Interesting! I will take a look at it!

It's actually possible to do that with a few hacks, but I think the user will have to choose which matcher to add. This is because if you're using something...

@voodoos' suggestion is good. Also, in the jsoo repository, I wrote something quite similar: https://github.com/ocsigen/js_of_ocaml/blob/c5b53bf1eb034a229a47e1f226097d81b5b279ba/.github/workflows/build.yml#L59-L84

I was just looking at this. There are already enough features to do this, so if we are going to improve this, we have to add a higher level of...