Pin npm plugin dependency versions

[ariel-linearb]

Summary

• Pin moment@2.30.1, lodash@4.18.1, and axios@1.14.0 in the action's plugin dependency install step
• Prevents unexpected breakage from unpinned packages resolving to new major/minor versions

Test plan

• Verify gitStream action runs successfully with pinned versions
• Confirm plugin dependencies install without errors

🤖 Generated with Claude Code

✨ PR Description

Purpose: Pin npm plugin dependency versions to specific releases to ensure reproducible builds and prevent breaking changes from automatic updates.

Main changes:

• Locked moment dependency to version 2.30.1, lodash to 4.18.1, and axios to 1.14.0
• Maintained existing @octokit/rest version pin at 20.1.1 for consistency
• Changed from floating version resolution to explicit version pinning for build stability

Generated by LinearB AI and added by gitStream.
_{AI-generated content may contain inaccuracies. Please verify before using.
💡 Tip: You can customize your AI Description using Guidelines Learn how}

[orca-security-us]

Orca Security Scan Summary

Status	Check	Issues by priority
Passed	Infrastructure as Code	0   0   0   0	View in Orca
Passed	OSS Licenses	0   0   0   0	View in Orca
Passed	SAST	0   0   0   0	View in Orca
Passed	Secrets	0   0   0   0	View in Orca
Passed	Vulnerabilities	0   0   0   0	View in Orca

[linearb]

✨ PR Review

Agentic review
Pinning npm plugin dependency versions flags a critical issue: non-existent package versions will silently break plugin installs—changes required.

1 issues detected:

🐞 Bug - Multiple non-existent npm versions pinned, silently breaking plugin installs

Details: Three of four npm versions pinned in action.yml:123 don't exist in the npm registry (lodash@4.18.1, moment@2.30.1, axios@1.14.0), causing npm i to fail silently due to continue-on-error: true. Downstream steps requiring these packages will crash at runtime with "module not found" errors instead of failing immediately at install time. Correct the versions (e.g., lodash@4.17.21, moment@2.29.4, axios@1.7.7) or remove the continue-on-error flag to surface install failures early.
File: action.yml (123-123)

Generated by LinearB AI and added by gitStream.
_{AI-generated content may contain inaccuracies. Please verify before using.
💡 Tip: You can customize your AI Review using Guidelines Learn how}

[yeelali14]

LGTM