Replace shop/setup-javascript-action with local composite (#68)

The five React Native workflows previously used `shop/setup-javascript-action@main`,
a private Shopify-org action that became unresolvable after the repo was
transferred from `shopify-playground` to the `Shopify` org.

Ports the local `.github/actions/setup` composite from the source RN repo
(Shopify/checkout-sheet-kit-react-native) — uses public `pnpm/action-setup`
and `actions/setup-node`, with the turbo cache step omitted (per Mark) since
turbo caching is already handled per-workflow.

The composite installs dependencies, so the standalone `pnpm install --frozen-lockfile`
step is removed from each workflow. Inputs are parameterised
(node-version-file, cache-dependency-path, package-json-file, working-directory)
so the action can be reused for the web component when it lands.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: Juanita-Dash

.github/actions/setup/action.yml

@@ -0,0 +1,41 @@
+name: Setup
+description: Setup Node.js and pnpm, then install dependencies
+
+inputs:
+  node-version-file:
+    description: Path to the file containing the Node.js version (package.json with engines.node)
+    required: false
+    default: package.json
+  cache-dependency-path:
+    description: Path to the pnpm lockfile used for caching
+    required: false
+    default: pnpm-lock.yaml
+  package-json-file:
+    description: Path to the package.json containing the packageManager field
+    required: false
+    default: package.json
+  working-directory:
+    description: Working directory in which to run pnpm install
+    required: false
+    default: .
+
+runs:
+  using: composite
+  steps:
+    - name: Install pnpm
+      uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
+      with:
+        package_json_file: ${{ inputs.package-json-file }}
+
+    - name: Setup Node.js
+      uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3.8.2
+      with:
+        node-version-file: ${{ inputs.node-version-file }}
+        registry-url: 'https://registry.npmjs.org'
+        cache: pnpm
+        cache-dependency-path: ${{ inputs.cache-dependency-path }}
+
+    - name: Install dependencies
+      working-directory: ${{ inputs.working-directory }}
+      shell: bash
+      run: pnpm install --frozen-lockfile

.github/workflows/rn-check-packed-files.yml

@@ -17,11 +17,13 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Setup Node.js and pnpm
-        uses: shop/setup-javascript-action@main
+      - name: Setup Node.js, pnpm, and install dependencies
+        uses: ./.github/actions/setup
         with:
           node-version-file: platforms/react-native/package.json
           cache-dependency-path: platforms/react-native/pnpm-lock.yaml
+          package-json-file: platforms/react-native/package.json
+          working-directory: platforms/react-native
 
       - name: Cache turbo build setup
         uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
@@ -31,9 +33,6 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-turbo-
 
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
       - name: Build module and compare snapshot
         run: |
           pnpm module clean

.github/workflows/rn-lint.yml

@@ -24,11 +24,13 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Setup Node.js and pnpm
-        uses: shop/setup-javascript-action@main
+      - name: Setup Node.js, pnpm, and install dependencies
+        uses: ./.github/actions/setup
         with:
           node-version-file: platforms/react-native/package.json
           cache-dependency-path: platforms/react-native/pnpm-lock.yaml
+          package-json-file: platforms/react-native/package.json
+          working-directory: platforms/react-native
 
       - name: Cache turbo build setup
         uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
@@ -38,9 +40,6 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-turbo-
 
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
       - name: Build module
         run: pnpm module build
 

.github/workflows/rn-test-android.yml

@@ -18,11 +18,13 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Setup Node.js and pnpm
-        uses: shop/setup-javascript-action@main
+      - name: Setup Node.js, pnpm, and install dependencies
+        uses: ./.github/actions/setup
         with:
           node-version-file: platforms/react-native/package.json
           cache-dependency-path: platforms/react-native/pnpm-lock.yaml
+          package-json-file: platforms/react-native/package.json
+          working-directory: platforms/react-native
 
       - name: Install JDK
         id: setup-java
@@ -39,9 +41,6 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-turbo-
 
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
       - name: Run Android tests
         timeout-minutes: 20
         env:

.github/workflows/rn-test-ios.yml

@@ -28,11 +28,13 @@ jobs:
           CURRENT_SIMULATOR_UUID=$(xcrun simctl create TestDevice "iPhone 16 Pro")
           echo "CURRENT_SIMULATOR_UUID=$CURRENT_SIMULATOR_UUID" >> "$GITHUB_ENV"
 
-      - name: Setup Node.js and pnpm
-        uses: shop/setup-javascript-action@main
+      - name: Setup Node.js, pnpm, and install dependencies
+        uses: ./.github/actions/setup
         with:
           node-version-file: platforms/react-native/package.json
           cache-dependency-path: platforms/react-native/pnpm-lock.yaml
+          package-json-file: platforms/react-native/package.json
+          working-directory: platforms/react-native
 
       - name: Cache turbo build setup
         uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
@@ -42,9 +44,6 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-turbo-
 
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
       - name: Setup Ruby
         uses: ruby/setup-ruby@c4e5b1316158f92e3d49443a9d58b31d25ac0f8f # v1.306.0
         with:

.github/workflows/rn-test.yml

@@ -18,14 +18,13 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Setup Node.js and pnpm
-        uses: shop/setup-javascript-action@main
+      - name: Setup Node.js, pnpm, and install dependencies
+        uses: ./.github/actions/setup
         with:
           node-version-file: platforms/react-native/package.json
           cache-dependency-path: platforms/react-native/pnpm-lock.yaml
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
+          package-json-file: platforms/react-native/package.json
+          working-directory: platforms/react-native
 
       - name: Run tests with coverage
         run: pnpm test --coverage --testPathPatterns="modules/@shopify/checkout-sheet-kit/tests" --coverageReporters=json-summary