🐛 pin pnpm version in workflows (#379)

* 🐛  pin pnpm version in workflows

* 🐛  github release workflows require permissions

changesets/action#220 (comment)

* 📝  update release note

Author: JiangWeixian

.changeset/dry-radios-crash.md

@@ -0,0 +1,6 @@
+---
+"@aiou/generator-pnpm-ci": patch
+"@aiou/preset-aiou": patch
+---
+
+pin pnpm version

.changeset/spicy-mayflies-jog.md

@@ -0,0 +1,6 @@
+---
+"@aiou/generator-pnpm-ci": patch
+"@aiou/preset-aiou": patch
+---
+
+github workflows require permissions https://github.com/changesets/action/issues/220#issuecomment-1396656742

packages/generators/pnpm-ci/assets/workflows/ci.yml

@@ -24,7 +24,7 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
       - name: Install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@7.32.1 -g
       - name: Install 
         run: |
           pnpm install --frozen-lockfile=false

packages/generators/pnpm-ci/assets/workflows/release.yml

@@ -14,6 +14,10 @@ jobs:
   version:
     timeout-minutes: 15
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      pull-requests: write
     steps:
       - name: checkout code repository
         uses: actions/checkout@v2
@@ -24,7 +28,7 @@ jobs:
         with:
           node-version: 14
       - name: install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@7.32.1 -g
       - name: install dependencies
         run: pnpm install --frozen-lockfile=false
       - name: create and publish versions

packages/generators/pnpm-ci/assets/workflows/snapshot-release.yml

@@ -12,6 +12,10 @@ jobs:
   version:
     timeout-minutes: 15
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      pull-requests: write
     steps:
       - name: checkout code repository
         uses: actions/checkout@v2
@@ -22,7 +26,7 @@ jobs:
         with:
           node-version: 14
       - name: install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@7.32.1 -g
       - name: install dependencies
         run: pnpm install --frozen-lockfile=false
       - name: create and publish versions

packages/presets/aiou/assets/workflows/pnpm/ci.yaml

@@ -24,7 +24,7 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
       - name: Install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@7.32.0 -g
       - name: Install 
         run: |
           pnpm install --frozen-lockfile=false

packages/presets/aiou/assets/workflows/pnpm/release.yaml

@@ -11,6 +11,10 @@ jobs:
   version:
     timeout-minutes: 15
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      pull-requests: write
     steps:
       - name: checkout code repository
         uses: actions/checkout@v2
@@ -21,7 +25,7 @@ jobs:
         with:
           node-version: 14
       - name: install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@7.32.0 -g
       - name: install dependencies
         run: pnpm install --frozen-lockfile=false
       - name: create and publish versions

packages/presets/aiou/assets/workflows/pnpm/snapshot-release.yaml

@@ -9,6 +9,10 @@ jobs:
   version:
     timeout-minutes: 15
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      pull-requests: write
     steps:
       - name: checkout code repository
         uses: actions/checkout@v2
@@ -19,7 +23,7 @@ jobs:
         with:
           node-version: 14
       - name: install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@7.32.0 -g
       - name: install dependencies
         run: pnpm install --frozen-lockfile=false
       - name: create and publish versions