Release 2026-27-01

.github/actions/bootstrap/action.yml

@@ -6,22 +6,10 @@ runs:
     - name: Setup node
       uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8
       with:
-        node-version: 20
-
-    - name: Get yarn cache directory path
-      shell: bash
-      id: yarn-cache-dir-path
-      working-directory: utils
-      run: echo "dir=$(yarn cache dir)" >> $GITHUB_OUTPUT
-
-    - uses: actions/cache@v4
-      id: yarn-cache
-      with:
-        path: ${{ steps.yarn-cache-dir-path.outputs.dir }}
-        key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}
-        restore-keys: |
-          ${{ runner.os }}-yarn-
+        node-version: 22
+        cache: 'npm'
+        cache-dependency-path: utils/package-lock.json
 
     - name: Install dependencies
       shell: bash
-      run: cd utils && yarn install --frozen-lockfile
+      run: cd utils && npm ci

.github/actions/build-validate-artifact/action.yml

@@ -11,13 +11,13 @@ runs:
     - name: Add data source ids to schema
       shell: bash
       run: |
-        cd utils && yarn add-datasource-ids
+        cd utils && npm run add-datasource-ids
 
     - name: Build & Validate Artifact
       shell: bash
       id: build-validate-artifact
       run: |
-        cd utils && yarn build-validate-quickstart-artifact ${{ inputs.output-artifact && '--output-artifact' || '' }}
+        cd utils && npm run build-validate-quickstart-artifact -- ${{ inputs.output-artifact && '--output-artifact' || '' }}
 
     - name: Debugging output
       shell: bash

.github/workflows/pr-checks.yml

@@ -3,6 +3,9 @@ name: PR Validation
 on:
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   validate:
     name: Validate Artifact
@@ -29,4 +32,4 @@ jobs:
         uses: "./.github/actions/bootstrap"
       - name: Validate Quickstart IDs
         run: |
-          cd utils && yarn validate-quickstart-ids
+          cd utils && npm run validate-quickstart-ids

.github/workflows/pr-merged.yml

@@ -1,5 +1,9 @@
 name: Update quickstarts
 
+permissions:
+  contents: write
+  pull-requests: read
+
 env:
   THIRD_PARTY_GIT_AUTHOR_EMAIL: opensource+bot@newrelic.com
   THIRD_PARTY_GIT_AUTHOR_NAME: nr-opensource-bot
@@ -34,7 +38,7 @@ jobs:
 
       - name: Generate UUIDs for quickstarts
         id: generate-uuids
-        run: cd utils && yarn generate-uuids
+        run: cd utils && npm run generate-uuids
 
       - name: Commit changes
         id: commit-changes

.github/workflows/release.yml

@@ -39,7 +39,7 @@ jobs:
 
       - name: Install OSS CLI
         run: |
-          yarn global add @newrelic/newrelic-oss-cli
+          npm install -g @newrelic/newrelic-oss-cli
 
       - name: Generate Third Party Notices
         id: generate-notices

.github/workflows/repolinter.yml

@@ -8,6 +8,10 @@ name: Repolinter Action
 # filtered in the "Test Default Branch" step.
 on: [push, workflow_dispatch]
 
+permissions:
+  contents: read
+  issues: write
+
 jobs:
   repolint:
     name: Run Repolinter

.github/workflows/run_tests.yml

@@ -8,6 +8,9 @@ on:
     paths:
       - "utils/**"
 
+permissions:
+  contents: read
+
 jobs:
   run-unit-tests:
     name: Unit tests
@@ -20,4 +23,4 @@ jobs:
         uses: "./.github/actions/bootstrap"
 
       - name: Run tests
-        run: cd utils && yarn test
+        run: cd utils && npm test

.github/workflows/submit-gate.yml

@@ -10,6 +10,9 @@ on:
       - release
     types: [closed]
 
+permissions:
+  contents: read
+
 jobs:
   upload-artifact:
     runs-on: ubuntu-latest

.github/workflows/validate_packs.yml

@@ -6,6 +6,11 @@ on:
     types:
       - completed
 
+permissions:
+  contents: read
+  statuses: write
+  pull-requests: write
+
 env:
   COMMIT_SHA: ${{ github.event.workflow_run.head_commit.id }}
 
@@ -14,16 +19,24 @@ jobs:
     name: Ensure quickstart ids are unique
     runs-on: ubuntu-latest
     steps:
+      - name: Create temp directory
+        run: mkdir -p ${{ runner.temp }}/artifacts/
+
       - name: Download artifact
         uses: dawidd6/action-download-artifact@268677152d06ba59fcec7a7f0b5d961b6ccd7e1e
         with:
           workflow: validation_gate.yml
           run_id: ${{ github.event.workflow_run.id }}
+          path: ${{ runner.temp }}/artifacts/
 
-      - name: Get PR number
+      - name: Get and validate PR number
         id: get_pr_number
         run: |
-          export PR_NUMBER=$(cat artifact/pr_number.txt)
+          PR_NUMBER=$(cat ${{ runner.temp }}/artifacts/artifact/pr_number.txt)
+          if ! [[ "$PR_NUMBER" =~ ^[0-9]+$ ]]; then
+            echo "Error: Invalid PR number"
+            exit 1
+          fi
           echo "pr-number=$PR_NUMBER" >> $GITHUB_ENV
 
       - name: Checkout repository
@@ -36,7 +49,7 @@ jobs:
 
       - name: Check for unique names and ids
         id: validation
-        run: cd utils && yarn check-quickstart-uniqueness
+        run: cd utils && npm run check-quickstart-uniqueness
 
       - name: Add commit status
         uses: "./.github/actions/add-commit-status"
@@ -48,16 +61,24 @@ jobs:
     name: Ensure images are valid
     runs-on: ubuntu-latest
     steps:
+      - name: Create temp directory
+        run: mkdir -p ${{ runner.temp }}/artifacts/
+
       - name: Download artifact
         uses: dawidd6/action-download-artifact@268677152d06ba59fcec7a7f0b5d961b6ccd7e1e
         with:
           workflow: validation_gate.yml
           run_id: ${{ github.event.workflow_run.id }}
+          path: ${{ runner.temp }}/artifacts/
 
-      - name: Get PR number
+      - name: Get and validate PR number
         id: get_pr_number
         run: |
-          export PR_NUMBER=$(cat artifact/pr_number.txt)
+          PR_NUMBER=$(cat ${{ runner.temp }}/artifacts/artifact/pr_number.txt)
+          if ! [[ "$PR_NUMBER" =~ ^[0-9]+$ ]]; then
+            echo "Error: Invalid PR number"
+            exit 1
+          fi
           echo "pr-number=$PR_NUMBER" >> $GITHUB_ENV
 
       - name: Checkout repository
@@ -70,7 +91,7 @@ jobs:
 
       - name: Validate Images
         id: validation
-        run: cd utils && yarn validate-images
+        run: cd utils && npm run validate-images
 
       - name: Add commit status
         uses: "./.github/actions/add-commit-status"
@@ -82,16 +103,24 @@ jobs:
     name: Ensure icons exist
     runs-on: ubuntu-latest
     steps:
+      - name: Create temp directory
+        run: mkdir -p ${{ runner.temp }}/artifacts/
+
       - name: Download artifact
         uses: dawidd6/action-download-artifact@268677152d06ba59fcec7a7f0b5d961b6ccd7e1e
         with:
           workflow: validation_gate.yml
           run_id: ${{ github.event.workflow_run.id }}
+          path: ${{ runner.temp }}/artifacts/
 
-      - name: Get PR number
+      - name: Get and validate PR number
         id: get_pr_number
         run: |
-          export PR_NUMBER=$(cat artifact/pr_number.txt)
+          PR_NUMBER=$(cat ${{ runner.temp }}/artifacts/artifact/pr_number.txt)
+          if ! [[ "$PR_NUMBER" =~ ^[0-9]+$ ]]; then
+            echo "Error: Invalid PR number"
+            exit 1
+          fi
           echo "pr-number=$PR_NUMBER" >> $GITHUB_ENV
 
       - name: Checkout repository
@@ -104,7 +133,7 @@ jobs:
 
       - name: Validate Icons
         id: validation
-        run: cd utils && yarn validate-icons
+        run: cd utils && npm run validate-icons
 
       - name: Add commit status
         uses: "./.github/actions/add-commit-status"
@@ -116,16 +145,24 @@ jobs:
     name: Ensure quickstart dashboard names are unique
     runs-on: ubuntu-latest
     steps:
+      - name: Create temp directory
+        run: mkdir -p ${{ runner.temp }}/artifacts/
+
       - name: Download artifact
         uses: dawidd6/action-download-artifact@268677152d06ba59fcec7a7f0b5d961b6ccd7e1e
         with:
           workflow: validation_gate.yml
           run_id: ${{ github.event.workflow_run.id }}
+          path: ${{ runner.temp }}/artifacts/
 
-      - name: Get PR number
+      - name: Get and validate PR number
         id: get_pr_number
         run: |
-          export PR_NUMBER=$(cat artifact/pr_number.txt)
+          PR_NUMBER=$(cat ${{ runner.temp }}/artifacts/artifact/pr_number.txt)
+          if ! [[ "$PR_NUMBER" =~ ^[0-9]+$ ]]; then
+            echo "Error: Invalid PR number"
+            exit 1
+          fi
           echo "pr-number=$PR_NUMBER" >> $GITHUB_ENV
 
       - name: Checkout repository
@@ -138,7 +175,7 @@ jobs:
 
       - name: Check for unique dashboard names
         id: validation
-        run: cd utils && yarn check-dashboard-name-uniqueness
+        run: cd utils && npm run check-dashboard-name-uniqueness
 
       - name: Add commit status
         uses: "./.github/actions/add-commit-status"
@@ -149,16 +186,24 @@ jobs:
   dashboard-helper:
     runs-on: ubuntu-latest
     steps:
+      - name: Create temp directory
+        run: mkdir -p ${{ runner.temp }}/artifacts/
+
       - name: Download artifact
         uses: dawidd6/action-download-artifact@268677152d06ba59fcec7a7f0b5d961b6ccd7e1e
         with:
           workflow: validation_gate.yml
           run_id: ${{ github.event.workflow_run.id }}
+          path: ${{ runner.temp }}/artifacts/
 
-      - name: Get PR number
+      - name: Get and validate PR number
         id: get_pr_number
         run: |
-          export PR_NUMBER=$(cat artifact/pr_number.txt)
+          PR_NUMBER=$(cat ${{ runner.temp }}/artifacts/artifact/pr_number.txt)
+          if ! [[ "$PR_NUMBER" =~ ^[0-9]+$ ]]; then
+            echo "Error: Invalid PR number"
+            exit 1
+          fi
           echo "pr-number=$PR_NUMBER" >> $GITHUB_ENV
 
       - name: Checkout repository
@@ -176,7 +221,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           URL="https://api.github.com/repos/${GITHUB_REPOSITORY}/pulls/$PR_NUMBER/files"
-          cd utils && yarn dashboard-helper $URL
+          cd utils && npm run dashboard-helper -- $URL
       - name: Comment
         if: steps.helper.outputs.comment != ''
         env:

.github/workflows/validation_gate.yml

@@ -7,6 +7,9 @@ name: Validation Gate
 on:
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   upload-artifact:
     runs-on: ubuntu-latest

.github/workflows/yaml-lint.yml

@@ -6,6 +6,9 @@ on:
       - "**.yml"
       - "**.yaml"
 
+permissions:
+  contents: read
+
 jobs:
   lint-yaml-files:
     name: Lint YAML Files