dev

.github/actions/setup-node-pnpm/action.yml

@@ -5,7 +5,11 @@ inputs:
   node-version:
     description: Node.js version
     required: false
-    default: "25"
+    default: "25.6.1"
+  pnpm-version:
+    description: pnpm version
+    required: false
+    default: "10.33.0"
   install:
     description: Whether to run pnpm install
     required: false
@@ -16,6 +20,8 @@ runs:
   steps:
     - name: Setup pnpm
       uses: pnpm/action-setup@v4
+      with:
+        version: ${{ inputs.pnpm-version }}
 
     - name: Setup Node
       uses: actions/setup-node@v6

.github/actions/setup-rust/action.yml

@@ -1,26 +1,31 @@
 name: Setup Rust
-description: Install Rust stable toolchain with cargo cache
+description: Install pinned Rust toolchain with cargo cache
 
 inputs:
+  rust-version:
+    description: Rust toolchain version
+    required: false
+    default: "1.88.0"
   targets:
     description: Additional Rust targets to install (comma-separated)
     required: false
-    default: ''
+    default: ""
   cache-key:
     description: Extra cache key suffix for cargo
     required: false
-    default: 'default'
+    default: "default"
   cache-paths:
     description: Additional paths to cache (newline-separated), appended to ~/.cargo/registry and ~/.cargo/git
     required: false
-    default: 'target'
+    default: "target"
 
 runs:
   using: composite
   steps:
-    - name: Install Rust stable
+    - name: Install Rust toolchain
       uses: dtolnay/rust-toolchain@stable
       with:
+        toolchain: ${{ inputs.rust-version }}
         targets: ${{ inputs.targets }}
 
     - name: Cache cargo
@@ -30,7 +35,8 @@ runs:
           ~/.cargo/registry
           ~/.cargo/git
           ${{ inputs.cache-paths }}
-        key: ${{ runner.os }}-cargo-${{ inputs.cache-key }}-${{ hashFiles('Cargo.lock') }}
+        key: ${{ runner.os }}-cargo-${{ inputs.rust-version }}-${{ inputs.cache-key }}-${{ hashFiles('Cargo.lock') }}
         restore-keys: |
-          ${{ runner.os }}-cargo-${{ inputs.cache-key }}-
+          ${{ runner.os }}-cargo-${{ inputs.rust-version }}-${{ inputs.cache-key }}-
+          ${{ runner.os }}-cargo-${{ inputs.rust-version }}-
           ${{ runner.os }}-cargo-

.github/actions/setup-tauri/action.yml

@@ -2,18 +2,22 @@ name: Setup Tauri Build
 description: Common Tauri GUI build setup - cargo cache with deps-only hash, version sync, route generation
 
 inputs:
+  rust-version:
+    description: Rust toolchain version
+    required: false
+    default: "1.93.1"
   rust-targets:
     description: Rust targets to install (comma-separated)
     required: false
-    default: ''
+    default: ""
   signing-private-key:
     description: Tauri updater signing private key content
     required: false
-    default: ''
+    default: ""
   signing-private-key-password:
     description: Tauri updater signing private key password
     required: false
-    default: ''
+    default: ""
   version:
     description: Version string to sync into Cargo.toml and tauri.conf.json
     required: true
@@ -45,9 +49,10 @@ runs:
           patchelf \
           libssl-dev
 
-    - name: Install Rust stable
+    - name: Install Rust toolchain
       uses: dtolnay/rust-toolchain@stable
       with:
+        toolchain: ${{ inputs.rust-version }}
         targets: ${{ inputs.rust-targets }}
 
     - name: Normalize Tauri signing key
@@ -86,8 +91,9 @@ runs:
           ~/.cargo/registry
           ~/.cargo/git
           target
-        key: ${{ runner.os }}-cargo-${{ steps.cargo-deps-hash.outputs.hash }}
+        key: ${{ runner.os }}-cargo-${{ inputs.rust-version }}-${{ steps.cargo-deps-hash.outputs.hash }}
         restore-keys: |
+          ${{ runner.os }}-cargo-${{ inputs.rust-version }}-
           ${{ runner.os }}-cargo-
 
     - name: Sync Tauri version

.github/workflows/release-cli.yml

@@ -1,10 +1,10 @@
 name: Release Packages
 
 env:
-  NODE_VERSION: '25'
+  NODE_VERSION: "25.6.1"
   NPM_REGISTRY_URL: https://registry.npmjs.org/
-  NPM_PUBLISH_VERIFY_ATTEMPTS: '90'
-  NPM_PUBLISH_VERIFY_DELAY_SECONDS: '10'
+  NPM_PUBLISH_VERIFY_ATTEMPTS: "90"
+  NPM_PUBLISH_VERIFY_DELAY_SECONDS: "10"
   CLI_NATIVE_MODULE_DIRS: |
     libraries/logger
     libraries/md-compiler
@@ -239,7 +239,7 @@ jobs:
       - uses: actions/checkout@v6
       - uses: ./.github/actions/setup-node-pnpm
         with:
-          install: 'false'
+          install: "false"
       - name: Setup npm registry
         uses: actions/setup-node@v6
         with: