From d99b6e54df9734bf1f03ab278d227bd905f33788 Mon Sep 17 00:00:00 2001
From: Olivier Biot <olivier.biot@me.com>
Date: Thu, 19 Mar 2026 14:57:26 +0800
Subject: [PATCH 1/2] Clean up CI workflows and remove stale rollup override

- Upgrade actions/cache from v4 to v5 across all workflows
- Add explicit permissions to test.yml and main.yml
- Remove dead rollup override (rollup is no longer in the dependency tree)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .github/workflows/docs.yml | 2 +-
 .github/workflows/main.yml | 4 +++-
 .github/workflows/test.yml | 4 +++-
 package.json               | 1 -
 4 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 3679f9255..817c6cd0e 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -20,7 +20,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - name: Get pnpm store directory
         run: echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
-      - uses: actions/cache@v4
+      - uses: actions/cache@v5
         with:
           path: ${{ env.STORE_PATH }}
           key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index a901d17e2..4f65926a1 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -4,6 +4,8 @@ on:
     branches: [master]
   pull_request:
     types: [opened, synchronize]
+permissions:
+  contents: read
 jobs:
   test:
     strategy:
@@ -22,7 +24,7 @@ jobs:
       - name: Get pnpm store directory
         shell: bash
         run: echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
-      - uses: actions/cache@v4
+      - uses: actions/cache@v5
         with:
           path: ${{ env.STORE_PATH }}
           key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 6acdd84e5..3d5502db3 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -4,6 +4,8 @@ on:
     branches: [master]
   pull_request:
     types: [opened, synchronize]
+permissions:
+  contents: read
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -18,7 +20,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - name: Get pnpm store directory
         run: echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
-      - uses: actions/cache@v4
+      - uses: actions/cache@v5
         with:
           path: ${{ env.STORE_PATH }}
           key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
diff --git a/package.json b/package.json
index ff16506e6..e1a862c0b 100644
--- a/package.json
+++ b/package.json
@@ -51,7 +51,6 @@
 			"minimatch@<4.0.0": "3.1.4",
 			"minimatch@>=9.0.0 <9.0.7": "9.0.7",
 			"ajv@<6.14.0": "6.14.0",
-			"rollup@>=4.0.0 <4.59.0": "4.59.0",
 			"vite": "8.0.0",
 			"esbuild": "0.27.4"
 		}

From 4412e40908a18407acf2b3112465141f44160e6e Mon Sep 17 00:00:00 2001
From: Olivier Biot <olivier.biot@me.com>
Date: Thu, 19 Mar 2026 14:57:58 +0800
Subject: [PATCH 2/2] Update pnpm-lock.yaml after removing rollup override

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 pnpm-lock.yaml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 32952a602..a9cc2479a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -8,7 +8,6 @@ overrides:
   minimatch@<4.0.0: 3.1.4
   minimatch@>=9.0.0 <9.0.7: 9.0.7
   ajv@<6.14.0: 6.14.0
-  rollup@>=4.0.0 <4.59.0: 4.59.0
   vite: 8.0.0
   esbuild: 0.27.4