From efc764b39e6dddff693c5f5a3567a77839c6c7b7 Mon Sep 17 00:00:00 2001
From: "prd-carapulse[bot]"
 <264278285+prd-carapulse[bot]@users.noreply.github.com>
Date: Tue, 12 May 2026 04:12:23 +0000
Subject: [PATCH 1/2] ci: remove shared Actions caches from workflows

- Remove setup-node yarn caching from the shared install action used by the manual npm release workflow.
- Stop restoring/saving Forge compilation caches in the pull_request Foundry workflow.
- Delete the now-unused install-cache composite action.
---
 .github/actions/install-cache/action.yml | 18 ------------------
 .github/actions/install/action.yml       |  1 -
 .github/workflows/foundry.yml            | 12 ++----------
 3 files changed, 2 insertions(+), 29 deletions(-)
 delete mode 100644 .github/actions/install-cache/action.yml

diff --git a/.github/actions/install-cache/action.yml b/.github/actions/install-cache/action.yml
deleted file mode 100644
index d9d0e313..00000000
--- a/.github/actions/install-cache/action.yml
+++ /dev/null
@@ -1,18 +0,0 @@
-name: Install repository with compilation cache
-
-runs:
-  using: composite
-
-  steps:
-    - uses: ./.github/actions/install
-
-    - name: Restore forge compilation cache
-      uses: actions/cache/restore@v4
-      with:
-        path: |
-          cache
-          out
-        key: forge-${{ github.ref_name }}
-        restore-keys: |
-          forge-${{ github.base_ref }}
-          forge-
diff --git a/.github/actions/install/action.yml b/.github/actions/install/action.yml
index 8ba8fad9..dd959e87 100644
--- a/.github/actions/install/action.yml
+++ b/.github/actions/install/action.yml
@@ -8,7 +8,6 @@ runs:
       uses: actions/setup-node@v4
       with:
         node-version: 18
-        cache: yarn
 
     - name: Install Foundry
       uses: foundry-rs/foundry-toolchain@v1
diff --git a/.github/workflows/foundry.yml b/.github/workflows/foundry.yml
index 354e7326..c1df0aba 100644
--- a/.github/workflows/foundry.yml
+++ b/.github/workflows/foundry.yml
@@ -36,21 +36,13 @@ jobs:
         with:
           submodules: recursive
 
-      - uses: ./.github/actions/install-cache
+      - uses: ./.github/actions/install
 
       - name: Build contracts without IR
         run: yarn build:forge
         env:
           FOUNDRY_PROFILE: test
 
-      - name: Save forge compilation cache
-        uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
-        with:
-          path: |
-            cache
-            out
-          key: forge-${{ github.ref_name }}-${{ github.run_id }}
-
   test:
     needs: build-no-ir
 
@@ -79,7 +71,7 @@ jobs:
         with:
           submodules: recursive
 
-      - uses: ./.github/actions/install-cache
+      - uses: ./.github/actions/install
 
       - name: Run tests in ${{ matrix.type }} mode
         run: yarn test:forge -vvv

From 1ddaf84df551f65a13cb25455708475f4e00ef92 Mon Sep 17 00:00:00 2001
From: "prd-carapulse[bot]"
 <264278285+prd-carapulse[bot]@users.noreply.github.com>
Date: Tue, 12 May 2026 04:14:00 +0000
Subject: [PATCH 2/2] ci: pin install action dependencies

Pin the external actions used by the shared install composite action so the cache-hardening PR satisfies the repository Actions policy.
---
 .github/actions/install/action.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/actions/install/action.yml b/.github/actions/install/action.yml
index dd959e87..475efe35 100644
--- a/.github/actions/install/action.yml
+++ b/.github/actions/install/action.yml
@@ -5,12 +5,12 @@ runs:
 
   steps:
     - name: Install node
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
       with:
         node-version: 18
 
     - name: Install Foundry
-      uses: foundry-rs/foundry-toolchain@v1
+      uses: foundry-rs/foundry-toolchain@c7450ba673e133f5ee30098b3b54f444d3a2ca2d # v1
 
     - name: Install dependencies
       run: yarn install --frozen-lockfile